Description

Conduct information security assessments and manage risk compliance across the organization.

Responsibilities

• Perform internal and external risk assessments to identify and evaluate security risks.
• Guide implementation, monitoring, and reporting of control processes and compliance measures.
• Communicate complex technical findings and remediation items to risk owners and diverse audiences.
• Collaborate across disciplines to document and explain security concepts to technical and non-technical stakeholders.

Required Skills

• 5+ years of experience performing Information Security assessments.
• Working knowledge of HIPAA, GLBA, and PCI DSS regulations.
• Experience with the NIST CSF framework.
• Bachelor’s degree in Computer Science, Information Systems, or Management Information.
• Ability to analyze and document information security concepts for both technical and non-technical users.
• Strong interpersonal and influencing skills for effective cross-organizational collaboration.

Preferred Skills

• CISSP or CRISC certification.
• Knowledge of NIST 800-171 and ISO 27001/27002 standards.
• Experience with Governance, Risk & Compliance (GRC) or Vendor Risk Management platforms.

Key Skills

Education

Bachelor's degree