Description

You will own security assurance, compliance, and risk management activities within the IT environment.

This role is on-site.

Responsibilities

• Manage risk monitoring, reporting, and quantification processes.
• Conduct cybersecurity compliance reviews and spot checks.
• Manage the Compliance Management System.
• Apply NIST, ISO 27001, and ISO 27005 frameworks to maintain security posture.

Required Skills

• 5+ years of IT experience, including 3 years in CyberSecurity/IT Security (GRC preferred).
• Knowledge of US Regulations such as NYCRR 500 and GLBA.
• Experience conducting audit procedures and third-party risk management.
• Familiarity with governance in cloud environments.
• Proficiency in JIRA (administrative capacity) and Microsoft Office (Word, Excel, PowerPoint, Outlook).
• Ability to write detailed technical documentation and communicate complex topics clearly.

Preferred Skills

• Information Security certification (CISSP, CCSP, CGRC, CISA, CISM, or CRISC).
• Experience working as an Information Security professional in a Financial Institution.

Key Skills

Education

Any Graduate