Information Security Specialist

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or related field. 2+ years of experience in information security risk management or similar role
• Knowledge and expertise with a wide range of security/risk management governance, guidance, compliance concepts and documentation such as NIST 800-53, NIST Cybersecurity Framework (CSF), ISO or equivalent
• Experience using and administrating GRC tooling. Proficient with Windows and Linux, including Active Directory and EntraID
• Strong analytical, good organizational, effective communication, and presentation skills
• Flexibility in work given and ability to actively research how to perform new tasks
• Proficient in using Microsoft Teams, Excel, PowerPoint, Word and AI tools (Copilot, ChatGPT and others)
• Experience with GenAI coding assistance and leveraging AI to improve processes
• CISSP, CRISC, CISM or other related security certifications

• The Information Security Specialist is responsible for supporting enterprise-wide cyber risk management and governance activities
• This role requires a strong foundation in information technology and internal controls, along with proficiency in security frameworks and a solid understanding of cybersecurity risk management practices
• The individual will collaborate across global teams to assess risks, recommend and implement robust security controls, and contribute to the development and maintenance of information security policies and standards
• In this role, the Information Security Specialist will also support both local and global regulatory compliance efforts, including identifying control gaps and assisting in risk remediation activities
• Additionally, the position plays a key role in enhancing the efficiency and effectiveness of security processes through standardization, consistency, and continuous improvement initiatives
• This role contributes to the broader mission of the Information Security function by helping protect the organization’s people, assets, and reputation through strong governance, optimized controls, and scalable security practices
• Maintain assurance and governance activities related to organization-specific security compliance methodologies that demonstrate our security governance to management and other key stakeholders including regulators, auditors, and boards
• Develop and maintain security policies, procedures, and guidelines according to industry best practices and regulatory requirements
• Conduct regular security controls testing to evaluate the effectiveness of existing security systems and procedures and recommend improvements
• Conduct comprehensive risk assessments to identify potential risks in the organization’s IT infrastructure and oversee the lifecycle of any security risks, ensuring that remediation is agreed, effective, and timely
• Prepare regular reports on the organization’s cyber risk posture for presentation to senior management
• Foster strong partnerships and collaborate regularly with other departments communicating security issues, obtaining additional information as needed, and providing status of remediation to security management
• Assist with regulatory exams by obtaining documentation, drafting responses, and helping develop security action plans
• Stay current with the latest cybersecurity regulatory standards, trends, threats, and technologies, and provide recommendations for improvement