Description

You will lead the design, implementation, and monitoring of an IT policy and control framework to support mission-critical business systems.

Responsibilities

• Design and implement a comprehensive IT policy and control framework aligned with NIST 800-53 and NIST 800-171 standards.
• Execute assessments to identify control gaps and work with leadership to remediate findings as a first line of defense.
• Manage the exception and risk acceptance process regarding control gaps and audit findings.
• Collaborate with internal and external auditors to support audit readiness and provide remediation action plans.
• Develop and maintain IT governance processes, including control identification, testing, and documentation.
• Provide guidance and training to stakeholders to increase control awareness and accountability.

Required Skills

• 5+ years of experience in IT Governance, Risk, and Compliance.
• Deep knowledge of NIST 800-53 and NIST 800-171 frameworks.
• Experience interpreting and supporting SOC 2 Security Trust criteria.
• Proficiency in Auditing and IT Risk Management.
• Working knowledge of COBIT and CISA frameworks.
• Experience with IT Governance and control effectiveness validation.
• Ability to manage remediation processes and track risk impacts.
• Strong ability to interpret regulatory compliance requirements and conduct gap analyses.

Preferred Skills

• Certified Information Security Manager (CISM) certification.

Key Skills

Education

Any Graduate