Information Risk Security Specialist @ Seattle, WA

• Contract

Title: Information Risk Security Specialist
Location: Seattle, WA
Duration: 6 to 9 Months + Contract to Hire

Position

Purpose:


Seeking an experienced, detail-oriented, and motivated Information Risk Security Specialist to monitor and oversee the Information Security program and activities of Avanade, protecting the confidentiality, integrity, availability, and accountability of Avanade’s assets.

Key Responsibilities:
Supporting tasks to maintain the security and health of Avanade’s systems:

• Establish and maintain the annual Information Security Risk Assessment for the organization.
• Demonstrate advanced understanding of business processes, internal control risk management, IT controls, and related standards.
• Identify and evaluate complex technology risks, internal controls, and opportunities for control improvements.
• Understand complex business and IT management processes.
• Utilize security testing tools and methodologies, analyze results, and recommend technical remediations.
• Apply risk management fundamentals using the organization’s framework to assess issues and vulnerabilities, negotiate risk levels, and respond appropriately.

Skills/Knowledge:
- Strong knowledge of Microsoft Technologies and Cloud Technologies (IaaS, SaaS, PaaS, Public, Private, Hybrid).
- Effective collaboration skills and experience working with remote teams.
- Flexibility to adapt to shifting priorities and rapid changes.
- Experience in full project lifecycle and application development preferred.
- 5+ years in system security, controls, or information management.
- Familiarity with security standards (ISO 27001/2, ISO 17799, ISO 31000, NIST 800 series).

- Experience with internal controls, risk assessments, and regulatory standards (GLBA, SOX, PCI).
- Ability to evaluate current security situations and anticipate future requirements.
- Excellent communication, report writing, and presentation skills.
- Influencing skills at senior organizational levels.
- Proficiency with spreadsheets and word processing.
- Industry experience in high-tech preferred.
- Minimum 5 years of experience with SANS and/or CISSP accreditation.
- Bachelor’s degree in IT, Business, or related discipline, or equivalent experience.