Description

You will lead the development and management of security control frameworks to ensure regulatory and industry compliance.

Responsibilities

• Build and manage a unified security controls framework covering all applicable regulatory and industry compliance requirements.
• Perform targeted gap assessments to identify deviations from the established control framework.
• Design and manage enterprise-wide security campaigns to remediate deviations and reduce risk.
• Partner with InfoSec and Engineering teams to define and prioritize security initiatives using a risk-based approach.
• Align risk management initiatives with relevant compliance regulations and provide executive reporting on program status.

Required Skills

• 10+ years of experience in Information Security, IT Audit, or Information Technology.
• 6+ years of experience managing information security programs and audits.
• Proven experience building unified security controls frameworks.
• Hands-on experience managing audits using PCI DSS, NIST CSF, NIST 800-53, ISO, or SOC 2.
• Experience auditing cloud infrastructure, specifically AWS.
• Knowledge of security engineering concepts including threat modeling and architecture reviews.
• Ability to deliver executive-level reporting on security programs and campaigns.

Preferred Skills

• Bachelor’s degree in Computer Science or a related field.
• Certifications such as PCI ISA, CISA, CRISC, ISO Lead Assessor, or CISSP.

Key Skills

Education

Bachelor's degree