Senior Engineer - Risk Analyst

Role & responsibilities

• Experience in information security with an emphasis on  risk assessment and/or risk management
• End-to end implementation of ISO 27001 risk management framework (at a minimum 1 implementation )  - Preferred
• Demonstrated ISO 27001 or other standard audit framework skillset in several information security domains - Mandatory
• Experience  conducting successful information security risk assessments Mandatory requirement
• Experience  conducting successful third party information security risk assessments –Preferred

Preferred candidate profile

• Demonstrated understanding & functional knowledge of technical domains of risk assessments to include at a minimum: - Mandatory
• Network security
• Identity and Access Management (IAM)
• Asset security
• Operational security
• Cloud Security
• VM
• Experience with GRC tools (e.g. RSA Archer) –Preferred
• Certifications such as  ISO 27001 LA, CISSP and/or CISA are preferred