Description

You manage information security controls, risk assessments, and regulatory compliance across people, processes, and technology. This role is remote.

Responsibilities

• Identify and collect top IT security risks related to critical applications, infrastructure, and third-party vendors.
• Conduct technical security reviews and assessments of vendors, applications, and IT infrastructure.
• Develop remediation plans and work with management to assign responsibilities and track progress on identified weaknesses.
• Implement security control plans, vendor security agreements, and security exceptions to standards.
• Map applications and infrastructure to security risks and ensure compliance with regulatory requirements.

Required Skills

• 5+ years of experience in IT risk, regulatory, or compliance roles.
• Hands-on experience with ISO27001, HIPAA, Sarbanes-Oxley (SOX), and PCI-DSS.
• Working knowledge of COSO and COBIT methodologies.
• Proficiency in IT Audit and Risk Management.
• Experience with systems control review and application/infrastructure control review processes.
• Strong analytical, interpersonal, and written communication skills.

Preferred Skills

• Bachelor's degree.
• Certifications: CISSP, GSEC, CISA, PCIP, or HCISPP.

Key Skills

Education

Bachelor's degree