Description

You will lead IT risk management, audit, and compliance efforts to secure data and manage third-party risks.

Responsibilities

• Execute third-party security risk assessments by reviewing and analyzing vendor technical documentation.
• Identify, measure, and document risks associated with vendor security controls and provide actionable recommendations.
• Manage IT security policies and standards through regular audits and vulnerability scanning processes.
• Coordinate and perform vendor reviews to ensure compliance with organizational security requirements.
• Implement ISO 27001 controls and annexures across global geographies and supplier environments.

Required Skills

• 8+ years of experience in IT Risk management, Audit, and compliance.
• Minimum 2 years of recent experience performing information systems audits or security reviews.
• Deep understanding of ISO 27001 controls, annexures, and implementation strategies.
• Proficiency with NIST 800-53 frameworks.
• Experience performing security audits against published standards.
• Knowledge of Cloud-based technologies, specifically IaaS and SaaS security controls and data protection.
• Ability to communicate technical risk to non-technical personnel.
• Bachelor’s Degree in Computer Science, Information Security, or a related discipline.

Preferred Skills

• ISO 27001 LA/LI certification.

Key Skills

Education

Bachelor’s Degree