Description

Lead security compliance assessments to ensure adherence to industry laws and regulatory requirements. You will own the evaluation of management, operational, and technical security controls.

Responsibilities

• Conduct independent assessments of security controls to determine overall effectiveness against NIST CSF, FFIEC, OCC, EUBA, OSFI, and NIST-CRI.
• Evaluate control design and operation against specific compliance requirements.
• Prepare draft reports including summaries, findings, and recommendations for management review.
• Communicate assessment observations and findings to stakeholders to ensure alignment.
• Execute compliance reviews for business process updates or new initiatives as requested.

Required Skills

• 5+ years of professional experience.
• 2-3 years in a lead assessor role specifically using the NIST Cybersecurity Framework.
• Deep understanding of evaluation and validation principles and practices.
• Expertise in NIST CSF, FFIEC, OCC, EUBA, and OSFI.
• Proficiency with CISA, CRISC, CISM, or QSA frameworks.
• Proven track record leading security and compliance initiatives at a project level.
• Strong analytical skills to translate complex problems into actionable strategies.
• Ability to collaborate across all organizational levels.

Preferred Skills

• Willingness to travel to client and other locations as needed.

Key Skills

Education

Any Graduate