Description

You will manage security risk assessments, audits, and compliance activities to support the Security Risk Management Program.

This role is on-site.

Responsibilities

• Conduct security risk assessments and manage audit and compliance activities.
• Develop and maintain security documentation, including policies, standards, and risk assessment reports.
• Collaborate with internal and external stakeholders to achieve security risk management outcomes.
• Apply auditing principles and internal controls to maintain compliance frameworks.
• Own new projects and research new security methodologies and technologies.

Required Skills

• 4-8 years of experience in security risk management, auditing, and compliance.
• Strong understanding of SOC 1 and SOC 2 frameworks and SSAE 18 standards.
• Experience with ISO 27001:2013, ISO 27701, and PCI DSS compliance standards.
• Proficiency in auditing principles, internal controls, and risk management methodologies.
• Ability to produce technical documentation and formal risk assessment reports.
• Proficiency with Microsoft Office, Slack, Box, and Zoom.
• Strong written and presentation skills for stakeholder communication.

Preferred Skills

• Active or pending information security or IT audit certifications such as CISSP, CISA, CISM, or CRISC.

Key Skills

Education

Any Graduate