Security Assurance

8+ years in an Information Security role with progressive experience in the sections mentioned under ‘Essential’ and ‘Other’ capability requirement

If you are someone with a security background with exposure to security assurance, industry controls frameworks and their applicability to enterprise assets, we would like to speak to you.

Essential capabilities (core) Experience in IT Security, Risk and/or Compliance Good understanding of frameworks and industry standards such as NIST CSF, CSA, SOC2, ISO, PCI DSS, MITRE, etc. Experience in assessing and/or designing security controls (Cloud and/or On-Premises), and possess ability to dive into technical details of control implementations Good understanding of broad cloud service offerings. (e.g., Azure, AWS, and Google cloud products/services), and possess technical competency to drive the compliance to cloud security controls Experience in audits and/or security assessments in one or more areas of security disciplines such as information, network, application, physical, privacy, etc. Understanding of the system hardening processes, tools, guidelines, and benchmarks. Understanding of current and emerging technologies and should be able to apply them to technology assets to drive security outcomes Experience in enforcing Policies and Standards Exposure to enterprise level architectural landscape

Other capabilities (technical) Work in a scaled agile structure with a persistent team of project managers and architects. Strong business engagement, influencing skills and expectation management with the ability to navigate complex topics with fact-based analysis. Understand the trade-offs involved in technology change while simultaneously delivering business benefit. Requires commercial acumen, business alignment and ability to negotiate. Broad IT background (deep Security knowledge)