Senior Specialist - Compliance - IT (2-3 yrs)

Senior Compliance Specialist

Job Description:

Education & Qualifications:

- Bachelor's in computer science, Computer Engineering, Information Systems or related field or equivalent work experience.

- Up to 2 years of experience managing Information Security audits (SOC 2, ISO 27001, PCI DSS, HIPAA).

- Experience implementing security techniques, practices, and controls that can be applied to address risks.

- Experience operating as part of an Information security program in alignment with common information technology management frameworks such as ISO 27001, NIST, CIS, ITIL, COBIT, etc.

- Strong written and verbal communication skills.

- Strong program management skills.

- Experience working closely with auditors and/or external regulators.

- Experience managing security tools.

Key Responsibilities/Duties:

- Maintain proactive ongoing compliance by utilizing GRC compliance tool to perform periodic security tasks and checks.

- Liaison with Engineering/IT by coordinating requests for information and coordinating responses to any observations.

- Monitor and analyze security systems to identify irregularities that can lead to potential threats.

- Responsible for Incident Management, be readily available for: Incident documentation, ensure risk analysis and severity, manage containment, lead investigation, ensure proper notification protocol, conduct & document lessons learnt, Report on findings and to then communicate them to the client.

- Conduct Vulnerability Management Program.

- Perform daily security health check procedures.

- Support and monitor remediation efforts of audit findings and validate the closure by reviewing relevant evidence.

- Provide actionable, technical advice to engineers to enhance security control design & effectiveness (including for cloud environments).