Description

You will manage information security risk and compliance through technical audits and vendor assessments.

Responsibilities

• Design and evaluate IT General Controls (ITGC) to ensure regulatory compliance.
• Perform third-party risk management, including vendor documentation reviews, SIG questionnaire analysis, and onsite facility assessments.
• Identify security gaps within risk management processes and develop cost-effective mitigation plans.
• Document and report technical risks to vendor assessment management, business partners, and external vendors.
• Analyze indicators of compromise on hosts and applications to process tactical mitigations.

Required Skills

• 3 years of experience in security engineering or audit roles.
• Deep knowledge of regulatory frameworks including OCC, FDIC, Fed Reserve, CFPB, FFIEC, ISO 27001, or SIG.
• Experience with IT General Controls (ITGC) design and evaluation.
• Hands-on experience using GRC tools for control management.
• Proven ability to perform vendor security assessments and third-party risk analysis.
• Strong analytical skills to identify indicators of compromise and threat validity.
• Excellent English communication skills for interacting with stakeholders at all organizational levels.
• Experience managing customer requirements within a managed services environment.

Key Skills

Education

Not specified