Description

You will manage the end-to-end lifecycle of information security assessment findings for vendors and applications. This role ensures identified control gaps are closed through actionable remediation recommendations and formal risk governance.

Responsibilities

• Own the risk register to drive security governance and align findings with business objectives.
• Provide risk remediation recommendations to close identified control gaps in applications and vendor environments.
• Collaborate with stakeholders to document and communicate risks effectively.
• Act as the subject matter expert for information security assessments regarding applications and vendors.
• Develop policies and procedures to reduce organizational risk exposure.

Required Skills

• 5+ years of experience performing information security assessments.
• Working knowledge of HIPAA regulations.
• Working knowledge of GLBA regulations.
• Working knowledge of PCI DSS regulations.
• Experience with the NIST CSF framework.
• Bachelor's degree in Computer Science, Information Systems, or Management Information Systems.

Key Skills

Education

Bachelor's degree