Description

Lead the design, implementation, and monitoring of an IT policy and control framework for mission-critical business systems.

This role is on-site.

Responsibilities

• Design and implement IT policy and control frameworks aligned with NIST 800-53 and NIST 800-171 standards.
• Execute assessments to identify control gaps and drive remediation as a first line of defense.
• Manage the exception and risk acceptance process for control gaps and audit findings.
• Collaborate with internal and external auditors to ensure audit readiness and provide remediation action plans.
• Develop governance processes including control identification, testing, documentation, and stakeholder training.

Required Skills

• 5+ years of experience in IT Governance, Risk, and Compliance.
• Deep knowledge of NIST 800-53 and NIST 800-171 frameworks.
• Experience interpreting and supporting SOC 2 Security Trust criteria.
• Proficiency in Auditing and IT Risk Management.
• Working knowledge of COBIT and CISA frameworks.
• Experience with IT Governance and control effectiveness validation.
• Ability to manage remediation processes and track risk impacts.
• Strong ability to interpret regulatory compliance requirements and conduct gap analyses.

Preferred Skills

• Certified Information Security Manager (CISM) certification.

Key Skills

Education

Any Graduate