Description

You will own application security reviews and vendor risk management within cloud environments.

Responsibilities

• Perform application security reviews using OWASP methodologies for cloud providers.
• Conduct information security risk assessments for new and critical vendors.
• Identify, interpret, and mitigate critical risk factors in a timely manner.
• Track, measure, and report vendor performance using a risk-based approach.
• Manage vendor risk assessments through on-site visits and SSAE18 reviews.

Required Skills

• 5+ years of technical analysis experience with an Information Security focus.
• Deep understanding of Application Security Risks and OWASP standards.
• Hands-on experience with AWS, MS Azure, or Google Cloud.
• 5+ years of experience with Linux/Unix, Windows, or Citrix.
• Knowledge of networking from a public cloud perspective.
• Experience with security tools including vulnerability scanners, firewalls, IDS/IPS, and AV software.
• Understanding of Shared Assessment methodology and FFIEC regulatory requirements.
• Experience working with legal or sourcing teams on contract design for vendor risk.
• Bilingual proficiency in both French and English.

Preferred Skills

• CISSP, CCSP, CISA, or CTPRA certifications.

Key Skills

Education

Bachelor's Degree