Description

You will manage and validate cybersecurity control effectiveness to ensure regulatory and contractual alignment across the organization.

Responsibilities

• Identify, document, and conduct compliance assessments to validate cybersecurity control effectiveness.
• Communicate assessment issues and control deficiencies to business partners, information governance, and security teams.
• Manage customer security questionnaires by collaborating with stakeholders to provide accurate responses.
• Partner with IT and Legal teams to advise on control requirements and remediation solutions.
• Develop and monitor compliance metrics, including Key Risk Indicators (KRIs) and reports on control effectiveness.

Required Skills

• BS or MA in Business, Computer Science, Information Security, or a related field.
• 2+ years of experience in information security, specifically within a cybersecurity risk role.
• 2+ years of experience managing risk and compliance issues or managing systems requiring risk identification and remediation.
• 4+ years of experience with regulatory compliance and frameworks such as ISO 27000, COBIT, or NIST 800.
• Demonstrable understanding of operational and IT risks and their impact on financial and operational concerns.
• Strong understanding of risk components including assets, vulnerabilities, controls, and threats.
• Experience managing information security programs, regulatory compliance, or audits.

Preferred Skills

• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• Certified Information Systems Auditor (CISA).

Key Skills

Education

BS or MA in Business, Computer Science, Information Security