Description

You will identify and mitigate information security risks associated with IT initiatives and business operations.

Responsibilities

• Evaluate end-to-end systems and process flows to identify inherent risks involving human factors and technical requirements.
• Assess risks against internal security standards to develop mitigation strategies and compensating controls.
• Participate as an Information Security stakeholder in functional and technical design sessions using agile and traditional methodologies.
• Perform detailed risk assessments and provide security requirements during planning, user story grooming, and technical design.
• Analyze control areas including authentication, authorization, access controls, encryption, key management, and network segmentation.
• Present risk assessment evaluations and impact analyses to security management and business sponsors.

Required Skills

• 9+ years of relevant work experience in Information Security, Information Risk Management, or Software Development/Technical Support.
• Experience assessing data flows, third-party access, secure transmission, and storage.
• Ability to work with architecture teams to evaluate enterprise solutions and security control impacts.
• Proficiency with AWS and Google Cloud Platform.
• Knowledge of DevSecOps practices.
• Understanding of Big Data security implications.
• Bachelor's Degree or equivalent professional experience.

Preferred Skills

• CCSP certification.

Key Skills

Education

Bachelor's Degree