- Security Framework Alignment and Related Controls Testing (NIST, CoBIT, ISO 27001)
- SOX Testing for IT Controls
- IT Compliance audits
- Vendor Risk Assessments
- Contribute to documentation of Information Security Policies, Standards, Processes, and Procedures.
- Manage and perform cybersecurity assessments on emerging/ongoing business initiatives, third-party services
- Evaluate third-party products/services by reviewing standardized questionnaires, evidencing their controls.
Non-Technical:
- Analytical thinker
- Collaborative team player
- Eexcellent written and verbal communication
- Capable of bridging the gap between business demands and cybersecurity requirements
- Ability to articulate cybersecurity risks in business terms
- Demonstrable knowledge of information security standards, data security practices and procedures
- Understanding of the impact of various data protection and integrity controls, operating systems and network security controls, authentication controls, and security protocols
- Requires demonstrable knowledge of security principles to a diverse range of risk scenarios to coordinate acceptable solutions between business needs, technology operations, and information security best practices.
Positive-to-Have:
- Familiarity with GRC Tools (RSA Archer, ServiceNow GRC)