Back
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Tier-1 brand, mid-level security role, metro location, and broad compliance skills increase applicant competition.
Requires domain-specific InfoSec risk, regulatory frameworks, and GRC tool experience, limiting cross-industry portability.
Explicit years, mandatory security assessment experience, regulatory frameworks, and GRC tool requirements create strict shortlisting filters.
Support and oversee information security assurance functions ensuring controls comply with legal, regulatory, policy, standards, and security requirements.
Participate in audits, reviews, and assessments for compliance with standards/frameworks such as NIST, PCI-DSS, SOX 404.
Engage with clients on security assessments, document responses, manage third party risk questionnaires (e.g., SIG), and support continuous process improvements.
Bachelor's degree in Computer Engineering or related field with minimum 2 years experience in Information Security OR 4 years experience without a degree.
Minimum 2 years conducting security risk assessments.
Understanding of IS Risk Management concepts and IT US Banking regulations including IT SOX 404, NIST, PCI DSS, HIPAA.
Work Timings: 5:00 AM to 2:00 PM EST.
Experience working with compliance, audit, and regulatory frameworks (NIST, PCI-DSS, SOX 404).
Familiarity with third party risk assessment tools such as SIG, UpGuard, Process Unity and GRC tools including Black Kite.
Demonstrates ability to manage client communications and process improvements related to security risk assessments in a virtual team environment.