Information Security Governance & Risk Specialist

Information Security Governance & Risk Specialist
The Information Security Governance & Risk Specialist job identifies and manages potential information security risks to the environment by conducting control assessments, vendor due diligence and identifying remediation action plans to mitigate cybersecurity risks. Working under close supervision, this role also supports the overall program and process execution of the supplier risk management team and business information security office to drive improvements to minimize possible risk exposure to the organization.

Key Responsibilities and Duties

• Learns to conduct cost/benefit evaluation of cloud solutions compared to virtual private networks, dedicated hosting, and in-house solutions.
• Supports the technical feasibility assessment of adopting external cloud based IT platform and infrastructure services within the organization.
• Helps identify portions of the organization's IT platform/infrastructure with the highest potential return for cloud deployment.
• Supports the organization's global strategies and initiatives to enhance Information Technology plans, operations and procedures.
• Faces problems that are not typically difficult or complex.
• Explains facts, policies and practices related to the job area.

Minimum Qualifications

• No experience required

Preferred Qualifications

• 1-2 years of experience in a Cybersecurity role
• Prior experience with automation, programming, and security engineering (Python, Powershell, etc.)
• Ability to interpret and transform data into meaningful reports and insights (SQL, Excel, etc.)
• Apply data-driven decision making to cybersecurity challenges
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity
• Industry certifications including: Security+, CISA, CAPM, CySA, etc.

Educational Requirements

• University (Degree) Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level
5IC