Description

You will design, audit, and maintain information security controls across organizational and technical domains.

This role is on-site.

Responsibilities

• Evaluate global standards and compliance frameworks to analyze existing controls and design enhancements.
• Plan and execute IT risk-based security audits, assessments, and fieldwork with minimal supervision.
• Collaborate with process owners to coordinate testing, remediate deficiencies, and advise on internal control improvements.
• Track audit findings, manage status updates, and ensure timely execution of remediation activities.
• Document policies, procedures, and standards while supporting customer security reviews and RFPs.

Required Skills

• 5+ years of experience in information security, risk, or compliance.
• Hands-on experience with ISO 27001/27002, 27701, 27018, SSAE 18 SOC 2, or NIST.
• Knowledge of security control domains: Access Management, Encryption, Risk Management, Network Security, Configuration Management.
• Proficiency in Patch Management, Change Management, Awareness & training, and BC/DRP.
• Experience supporting evidence collection via GRC tools.
• Ability to manage RFPs and external security or privacy inquiries.
• Experience defining, collecting, and tracking security metrics.

Preferred Skills

• Graduate degree in a relevant technical field.

Key Skills

Education

Any Graduate