Description

You will manage risk assessment, control selection, and compliance programs to ensure audit readiness and security effectiveness.

Responsibilities

• Lead periodic risk assessments and integrate remediation efforts into the risk management process.
• Implement and monitor controls to meet client requirements, contractual security standards, and company policies.
• Partner with service delivery leadership to communicate and manage risk levels.
• Direct small teams in performing risk management duties and provide guidance to junior employees.
• Translate regulatory requirements into actionable information security objectives and tactical initiatives.

Required Skills

• 5-10 years of experience in Information Risk Management, Information Security, or auditing.
• Deep understanding of IT Control frameworks and risk assessment methodologies.
• Working experience in at least two compliance programs such as PCI DSS, HIPAA, ISO 27001, SOC2, SOX, NIST, FISMA, or COBIT.
• Technical knowledge of network security, perimeter security, data security, and end-user system security.
• Knowledge of Cloud Security, threat analysis, and VA/PT.
• Ability to communicate complex risks to non-IT business owners and C-level executives.
• Strong analytical, problem-solving, and verbal/written communication skills.
• Ability to work effectively within virtual teams using digital tools.
• Understanding of data privacy and business continuity management (BCM) concepts.

Preferred Skills

• Security certifications such as CISSP, CISM, CRISC, CGEIT, ISO27001, or CISSA.

Key Skills

Education

ANY GRADUATE