Security Risk and Compliance Management Specialist IV

View full description

Requirements:

• 5+ years of experience in information security policy, standards, compliance, and related programs.
• Must possess at least one of the following active certifications: CISA, CISM, CISSP, or CFE.
• Other certifications such as ITIL, PMP, SANS/GSEC, CIPP, CRISC, CGEIT, CPA/CA are preferred.
• Leadership experience in information security is considered a plus.

Responsibilities:

• Acts as an advocate in the development of overall information security program globally.
• Creates and performs global IT Risk and Compliance assessments.
• Performs gap assessments and coordinates remediation planning/execution for compliance frameworks.
• Leads cross-functional teams in strategy development and implementation of risk framework and compliance solutions.
• Conducts risk assessments and documents findings.
• Develops training and communication for Information Security, IT Risk, and compliance.
• Coordinates and responds to regulatory requirements and vendor due diligence activities.
• Provides subject matter expertise to various business units.
• Directs analysis and root cause identification.
• Executes internal customer audits and manages compliance portfolio presentations.