Information Security Risk Consultant

Primary Responsibilities:

• Assessing effectiveness of ITGC controls in accordance with internal auditing and government-mandated standards
• Identifying control deficiencies and making recommendations to improve the efficiency of operations and the control environment
• Driving the remediation process and tracking status from all phases to completion
• Ensuring any issues are resolved prior to artifacts being turned over to external auditors
• Communicating complex information via phone conversations and emails to non-technical clients, internal customers and leadership
• Interacting and collaborating with a variety of stakeholders (other team members, internal customers, and leadership)
• Working to continuously improve the infrastructure security and compliance posture of the organization
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications:

• Bachelor's degree or equivalent experience
• Experience in evidence testing or QA
• Evidence gathering knowledge and experience in HIPPA, SOC, GDPR
• Knowledge and experience in Information Security audits
• Knowledge of SOX and ICFR/ITGC controls