Operations/ Management

Associate Information Security Risk Auditor

  • Work with business partners to define/enhance solutions to meet business needs and security requirements
  • Process risk records, assess risk, identify and document associated mitigating controls, required remediation tasks and risk ranking
  • Assist end users in navigating the remediation process
  • Work cross functionally with infrastructure and security teams to identify and assess technical risk and associated remediation plans
  • Engage BISO’s/SISO’s as needed for risk escalations, reviews and documented approvals
  • Bachelor’s Degree in information technology/Security or equivalent experience
  • General understanding of security and risk concepts and principles and how to apply them
  • Understanding of regulatory mandates and security models to include: ISO 27001, HIPAA, SOX, PCI, GLBA, NIST

Preferred Qualifications:

  • Project Work Experience
  • Experience with written and verbal communications appropriate for all levels
  • Ability to build and maintain trust relationships with a customer