Description

Own product security assessments, vendor assurance, and risk management for technical products.

This role is on-site.

Responsibilities

• Conduct product security assessments for current and new products against established security requirements.
• Provide third-party assurance for global vendors and monitor control effectiveness across brands and markets.
• Collaborate with product teams to prioritize and implement remediation plans for vulnerabilities and weaknesses.
• Partner with Security Architecture, Cyber Ops, and Risk teams to complete third-party security assessments.
• Assist with the risk management process within the Media practice area.

Required Skills

• 5+ years of experience in security assessment or risk management.
• Expertise in risk assessing technical products and solutions.
• Broad knowledge of security domains including IAM, network security, and security operations.
• Practical knowledge of SDLC and embedding security early into the lifecycle.
• Strong stakeholder management skills for both technical and non-technical audiences.
• Proficiency in Cyber Ops, Security Architecture, and Security Operations.
• Understanding of modern technologies, architectures, and development practices.

Preferred Skills

• Applicable security certifications.
• Experience with security assessment methodologies and frameworks such as ISO, NIST, SOC2, or PCI.

Key Skills

Education

Any Graduate