Description

You manage risk assessments, control selection, and compliance programs to ensure audit readiness and security effectiveness.

This role is on-site.

Responsibilities

• Lead periodic risk assessments and integrate remediation efforts into the risk management process.
• Implement and monitor controls to meet client requirements, contractual security standards, and company policies.
• Partner with service delivery leadership to communicate and manage risk levels.
• Translate regulatory requirements into actionable information security objectives and tactical initiatives.

Required Skills

• 5-10 years of experience in Information Risk Management, Information Security, or auditing.
• Deep understanding of IT Control frameworks and risk assessment methodologies.
• Working experience in at least two compliance programs such as PCI DSS, HIPAA, ISO 27001, SOC2, SOX, NIST, FISMA, or COBIT.
• Technical knowledge of network security, perimeter security, data security, and end-user system security.
• Ability to communicate complex risks to non-IT business owners and C-level executives.
• Strong analytical, problem-solving, and verbal/written communication skills.

Preferred Skills

• Security certifications such as CISSP, CISM, CRISC, CGEIT, ISO27001, or CISSA.

Key Skills

Education

ANY GRADUATE