Description

You will manage and support the design of organizational, procedural, and technological security controls within applicable frameworks. You own the planning and performance of IT risk-based security audits, assessments, and fieldwork execution.

Responsibilities

• Evaluate global standards and compliance frameworks to analyze existing controls and design control enhancements.
• Collaborate with process owners to coordinate testing, remediate deficiencies, and advise on internal control improvements.
• Manage audit findings by tracking status updates and ensuring timely execution of remediation activities.
• Document new and updated policies, procedures, standards, and resources while supporting customer security reviews and RFPs.

Required Skills

• 5+ years of experience in information security, risk, or compliance.
• Experience performing internal audits with minimal supervision using professional audit judgment.
• Hands-on experience with frameworks such as ISO 27001/27002, 27701, 27018, SSAE 18 SOC 2, or NIST.
• Knowledge of security control domains including Access Management, Encryption, Risk Management, Network Security, and Configuration Management.
• Proficiency in Patch Management, Change Management, Awareness & training, and BC/DRP.
• Experience supporting evidence collection via GRC tools.
• Ability to manage RFPs and external security or privacy inquiries.
• Experience defining, collecting, and tracking security metrics.

Preferred Skills

• Any Graduate degree in a relevant technical field.

Key Skills

Education

Any Graduate