Description

Lead security risk assessments and manage compliance frameworks to ensure organizational security posture.

Responsibilities

• Conduct vendor risk assessments and translate technology deficiencies into business impact.
• Manage risk treatment and exception processes across the organization.
• Review security architecture designs, focusing on authorization, authentication, and encryption for data in transit and at rest.
• Evaluate security control domains including Asset Management, Configuration Management, SDLDC, and Identity Access Management.
• Communicate technical security concepts effectively to system engineers and auditors.

Required Skills

• 5+ years of experience in security risk assessments and information security concepts.
• Practical application of ISO 27001, NIST SP 800-53, NIST CSF, PCI DSS, and SOC2.
• Deep understanding of CIS Controls, SANS Critical Security Controls, and COBIT frameworks.
• Knowledge of technical security controls including logical access, encryption, DLP, and secure coding practices.
• Experience with vulnerability management and network security technologies.
• Proficiency in security domains such as Logging and Monitoring, Data Security, and Security Governance.
• Strong attention to detail and diligence in audit environments.
• CISSP, CISA, CISM, or CEH certification.

Preferred Skills

• Experience configuring OneTrust Compliance Automation for automated evidence collection.
• Experience using OneTrust vendor assessment tools for third-party risk management.

Key Skills

Education

Any Gradute