Cyber Security Assessor

Responsibilities

• Performing information security reviews of third parties
• Occasionally travelling to work onsite with third parties to collect and review documentation
• Ensuring third parties are prepared for information security assessments
• Evaluating a third parties information security risk
• Discussing information security gaps with the third party
• Escalating issues or risks identified during the assessment
• Managing relationships with third parties and Enterprise Vendor Managers

• 3 Years experience in Information Security and/or IT Audit
• Technical writing and verbal communication skill
• Ability to effectively work with partners at varying knowledge and organization levels.
• Ability to communicate clearly and effectively with both technology/development and business partners
• Technical skills include the domains of information security and business continuity including:
  Security Controls (Infrastructure Security, Access Management, Physical Security, Application Security, etc.) IT Compliance, SOX Compliance Change Management Enterprise Risk Management
• Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards

• Information Security
• IT Audit
• Security Controls
• Infrastructure Security
• Access Management
• Physical Security
• Application Security
• IT Compliance
• SOX Compliance
• Change Management

• Technical writing
• Verbal communication
• Relationship management
• Effective collaboration
• Clear communication