Description

You will own information security risk management and compliance assurance activities.

This role is on-site.

Responsibilities

• Plan and execute information security risk assessments for assigned projects, recommending mitigation strategies.
• Liaise with ITM and Line of Business teams during project implementation regarding information assets.
• Monitor security events and vulnerabilities, supporting management reporting on risk posture.
• Support the Client Internal Control System (Sarbanes-Oxley) IT controls.
• Develop security policies, standards, procedures, and awareness materials using technical writing skills.

Required Skills

• 5+ years of IT experience, including 3 years in CyberSecurity or IT Security (preferably GRC).
• Experience in Risk Management, including Risk Monitoring and Reporting.
• Knowledge of Information Security Frameworks: NIST, ISO 27001, and ISO 27005.
• Experience conducting Cybersecurity Compliance reviews or Spot Checks.
• Experience in information security architecture, firewall management, IDS, IPSec, VPN, and data encryption.
• Proficiency with Microsoft Office Suite (Word, Excel, PowerPoint, Outlook).
• Familiarity with risk assessment and mitigation, and contingency planning.
• Experience with risk quantification and Third Party Risk Management.
• Cybersecurity knowledge including PKI and secure application coding.

Preferred Skills

• CISSP, CCSP, CGRC, CISA, CISSM, or CRISC certification.
• Experience managing a Compliance Management System or using JIRA administratively.

Key Skills

Education

Any Gradute