Description

Maintain application and AI registers, lead risk assessments, and govern user access reviews for business applications.

This role is on-site.

Responsibilities

• Maintain and support application and AI registers to ensure an accurate inventory of in-scope business applications.
• Lead the application risk assessment program to identify security risks, document findings, and support risk-based decision making.
• Validate application security controls, documenting control effectiveness, gaps, and recommended improvements.
• Govern the user access review (UARs) process for business applications and validate appropriate access based on job responsibilities.
• Provide application configuration guidance to support secure deployment and ongoing management of business applications.

Required Skills

• 0–3 years of experience in information security, technology risk, IT administration, application support, or a related field.
• Understanding of application security concepts: access management, secure configuration, control validation, vulnerability identification, and remediation tracking.
• Familiarity with web applications, SaaS platforms, and APIs.
• Knowledge of identity and access management (IAM) and common security risks affecting business applications.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Management Information Systems, or a related field (or equivalent practical experience).
• Understanding of application risk assessments and security control testing.

Preferred Skills

• Familiarity with third-party security reviews.

Key Skills

Education

Any Graduate