Description

You will manage and support the design of organizational, procedural, and technological security controls within applicable security frameworks.

Responsibilities

• Support the planning and execution of IT risk-based security audits, risk assessments, and fieldwork.
• Evaluate global standards, compliance frameworks, and regulations to identify control improvements and design growth.
• Collaborate with process and control owners to coordinate testing, remediate deficiencies, and update process documentation.
• Manage audit findings by tracking status updates and ensuring timely execution of remediation activities.
• Maintain security policies, procedures, and standards while supporting customer security reviews, RFPs, and external inquiries.

Required Skills

• 5+ years of experience in information security, risk, or compliance.
• Experience performing internal audits with minimal supervision using professional audit judgment.
• Knowledge of security control domains including Access Management, Encryption, Risk Management, Network Security, Configuration Management, Patch Management, Change Management, Awareness & training, and BC/DRP.
• Hands-on experience with frameworks such as ISO 27001/27002, 27701, 27018, SSAE 16/18 SOC 2, and NIST.
• Ability to collect and manage audit evidence using GRC tools.
• Experience supporting RFPs and external security or privacy inquiries.
• Capability to define, collect, and track security metrics.

Key Skills

Education

Any Graduate