Senior Compliance Security Specialist
Core
Spearhead initiatives to identify, investigate, communicate, resolve, and improve information security governance, risk, and compliance in IT investments.
Role type
Senior IC compliance security specialist
Builds
Risk assessment processes, vulnerability management programs, and third-party risk oversight
Domain
Financial services / Cybersecurity governance
Required skills
Risk assessment, vulnerability management, third-party risk assessment, security controls testing, policy exception management, IT general controls validation, risk reporting, Python scripting, Power BI, security governance frameworks (COBIT, NIST, ISO27001, CIS), SDLC, PCI/PII compliance, cryptography basics, identity management (MFA, SSO)
Preferred skills
CISSP, CISM, CISA, CCSP, CRISC certifications, experience with penetration testing and application security testing, experience managing platforms/applications
Technologies
Python, Power BI, COBIT 5, NIST CSF, ISO27001, CIS, PCI, PII
Responsibilities
Champion risk assessment of technologies and processes; Connect dots to improve risk assessment processes; Collaborate with stakeholders to prioritize and mitigate vulnerabilities; Follow up on configuration and cloud gaps and track remediation; Help mature existing vulnerability management program; Assess third-party risk on vendors; Provide oversight, reporting, and metrics on risk functions; Perform security risk assessments for projects and changes; Review risk assessments of peers; Validate operating effectiveness of IT general controls; Maintain risk and controls repositories; Provide support for policy exception management; Assist with metrics and reporting; Manage platforms/applications within the team mandate
Seniority
Senior, hands-on IC
