Compliance & Security Specialist
Core
Conduct cybersecurity risk assessments, oversee vulnerability remediation, validate controls, and deliver governance and compliance reporting for a financial institution.
Role type
Compliance & Security Specialist (IC)
Builds
Cybersecurity risk posture, vulnerability management workflows, and regulatory compliance readiness.
Domain
Financial Services / Cybersecurity & GRC
Required skills
Cybersecurity risk assessment, vulnerability management, control validation, AML platform administration, GRC platform administration, policy development, incident reporting, root cause analysis, risk metrics reporting, SDLC understanding, cloud security, identity and access management, cryptography fundamentals.
Preferred skills
CISSP, CISM, CISA, CCSP, CRISC certifications, NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, COBIT, PCI compliance, PII protection, Agile methodologies.
Technologies
IBM OpenPages, AML platforms, GRC platforms.
Responsibilities
Conduct cybersecurity risk assessments and validate IT general controls; oversee vulnerability remediation from assessments and penetration testing; develop and implement DLP policies; prepare risk metrics, dashboards, and governance reporting; provide backup administration for AML and GRC platforms; partner with Risk, Audit, and business teams on risk decisions; escalate significant risks and control deficiencies.
Seniority
Mid-level, hands-on IC
