Cannot work C2C.

Description:

Hiring a Security Analyst, Information Security to join our Technology Risk department. In this role, you will lead and execute on a growing slate of activities related to technology governance, including overseeing policies, controls and risk governance monitoring activities. The Senior Analyst functions as a project manager/subject matter expert, overseeing the completion of assigned tasks encompassing all aspects of Technology governance.

Responsibilities:

• Lead the Technology Policy Management Team and drive Technology regulatory adherence to compliance in regarding to policies and standards
• Build out and improve GRC standards and policies around all of technology – security, asset mgmt., business resiliency, etc.
• Create/Implement/Enforce Policy Management guiding principals
• Manage Technology Policy Management Backlog and Document Repository and Archives
• Serve as contact to address Technology Documentation audit requests and findings
• Create/Manage NIST/ and other frameworks Alignment Roadmap
• Reach out to internal/external partners to establish collaboration on document governance processes
• Support the communication of security policies and standards to internal stakeholders

Skills:

Security, Information security

Top Skills Details:

Security,Information security

Additional Skills & Qualifications:

• Excellent project management skills
• Exceptional verbal and written communication
• Ability to interface with all levels of staff and management

This role will be focused around building out GRC policies and standards – must have experience in writing standards:

 This person will most likely come from a GRC background with heavy governance experience

 They will be building out standards and policies around all of technology – security, asset mgmt., business resiliency, etc. Main framework they will be operating in is NIST.

 Once they build out the standards and policies, they will need to put a program in place to follow and operate in moving forward.

What you’ll bring:

• Detailed knowledge of several information security domains, for example, access management, application security, network security, cryptography, physical security, or regulatory/compliance.
• Bachelor’s degree in computer science, management systems or related field.
• Previous experience with industry frameworks and standards, for example NIST 800-53, PCI, and ISO 27001-27002.
• Strong attention to detail and problem-solving skills.

Essential Duties and Responsibilities:

• Participate in the full lifecycle of an assessment up to but not including the vendor remediation status reporting phase.
• Coordination and scheduling of internal client

Experience Level:

Entry Level

About TEKsystems:

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.