IT Security Analyst

Information Security Risk Manager

This position shall perform cross-functional collaboration with the other members of the information security team, and the business to manage the identification, mitigation, resolution and acceptance/deferral of information security risks to the organization.

Collaborate with project teams to interpret any security risks found during certification processes; help define mitigating controls and design plans for remediation, or alternatively assist with the exception process.

Maintain continuity and consistency between all business unit level information protection programs.

Manage the information security risk identification, mitigation, acceptance, monitoring and reporting processes. Collaborate with Governance, Risk and Performance team on metrics and reporting.

Identity and Access Management (IAM) experience

Clear understanding of IT audit methodologies.

Exceptional written and oral communication skills

Familiarity with IAM tools.

Knowledge in auditing, internal audit standards, fraud awareness, and professional ethical standards and enterprise risk management

Three years of combined IT audit and security work experience with a broad range of exposure to systems analysis, application development, database design and administration and 1 year of experience with IT security required.

Desired professional certification in audit and/or technical security areas