Description

You will own security risk management, control implementation, and assurance activities.

This role is on-site.

Responsibilities

• Develop and implement a Common Control Framework (CCF).
• Perform security control assessments and collaborate with stakeholders to remediate identified gaps.
• Conduct risk assessments for entries in the Cybersecurity Risk Register.
• Manage security assurance activities, including audits.
• Support security generalist duties by applying basic information security concepts.

Required Skills

• 3+ years of experience in an Information Security team.
• Knowledge of SOC-2, ISO27001, NIST, PCI-DSS, HIPAA, or similar frameworks.
• Experience with Information Security Audit and Assurance functions.
• Familiarity with GRC tools like Archer, OneTrust, or ServiceNow.
• Proficiency in building dashboards using Tableau and/or Google Looker.
• Familiarity with CISSP, CISSA, or CISSM concepts.
• Prior experience in a Technology sector or startup environment.

Preferred Skills

• CISA, CISM, or CISSP certification.

Key Skills

Education

Any Graduate