Description

Manage IT security risk, compliance, and control effectiveness to ensure alignment with regulatory standards and organizational policies.

Responsibilities

• Perform compliance reviews for PCI, SOC2, ISO, and State of Florida cybersecurity controls.
• Execute IT security controls effectiveness testing and manage remediation efforts for identified gaps.
• Maintain the IT security risk and compliance matrix, providing risk mitigation strategies and management reporting.
• Manage the Third Party Risk Management Program (TPRM) by analyzing SOC-2 reports and mapping them to NIST, PCI, and COBIT controls.
• Identify and rank asset criticality to estimate potential losses and implement cost-effective mitigation actions.

Required Skills

• 7-10 years of IT Audit experience.
• 3 years of IT Risk Management lifecycle experience.
• 3 years of hands-on technical experience as a developer or system administrator.
• Proficiency with NIST 800-30 Risk Assessment Standards.
• Extensive experience in IT General Controls (ITGC) evaluation and design.
• Advanced skills in business process mapping, documentation, and policy development.
• Deep understanding of PCI DSS standards and the current threat landscape.
• Bachelor’s Degree in Computer Science, Information Systems, Business Administration, or equivalent work experience.

Preferred Skills

• CISA and CISSP certifications.

Key Skills

Education

Any Gradute