Description

You will lead compliance and risk management functions to ensure alignment with industry standards and regulatory requirements.

Responsibilities

• Manage technical and non-technical FCC and PCI compliance security controls and oversee remediation of non-conformity findings.
• Audit security controls related to web applications, APIs, IAM, PAM, PII, CPNI, and access management.
• Develop, implement, and drive the execution of cybersecurity risk management frameworks and procedures.
• Perform security and compliance risk assessments to identify and manage cybersecurity risks.
• Partner with cross-functional teams to develop risk response plans, monitor mitigation effectiveness, and track progress.
• Assist with the development of System Security Plans, Continuous Monitoring, and Plan of Action and Milestones.

Required Skills

• 8+ years of experience in GRC functions related to Compliance and Risk Management.
• 5+ years of experience in FCC Compliance, privacy, PII, and PCI.
• Deep knowledge of SOC 2, NIST 800 171, and NIST 800 53 frameworks.
• Experience auditing Web application, API security, IAM, PAM, PII, CPNI, Authentication, Access Control, and MFA.
• Proven ability in record keeping, documentation, and evidence gathering for audit readiness.
• Experience defining risk metrics and thresholds with risk owners.
• Ability to develop System Security Plans and perform Risk Exposure analysis.
• Any Graduate degree.

Key Skills

Education

Any Graduate