enable and secure customer organizations and ecosystems
configure, monitor, and manage network performance
protect organizational infrastructure from cyber-attacks
assess, predict, prevent, and manage IT infrastructure risk
develop and implement security policies and procedures
raise awareness of potential security threats through training
Requirements
2+ years of experience in GRC frameworks; enterprise risk management, internal audit, regulatory compliance management, policy management, third party risk management
working knowledge of common audit and compliance tools
experience in analyzing and translating business requirements into control objectives, designing security controls
excellent understanding of security standards and best practices e.g., ISO27001, NIST
experience in advising clients on regulatory requirements (e.g., HIPAA, PCI DSS, FBA, GDPR, DORA)
experience performing GRC maturity assessments
experience with coordinating SOC 2 and/or ISO 27001 audits