Must Have Skills Skill 1 – Any recognized security certifications, e.g., CISSP, CISA, CISM Skill 2 - Monitor internal and external threat landscape to update strategy and intellectual protection program roadmap
Skill 3 – Provide periodic reports to management team and key stakeholders
Roles and Responsibility
- Demonstrate strong knowledge in IT controls, risk assessments, and testing of security measures
- Identify opportunities to continuously innovate and improve the program and value delivered to organization
- Ensure successful completion of the annual supplier cybersecurity assessment.
- Perform on-site control validation to ensure the highest impact suppliers have the proper cybersecurity controls in place.
- Independently and proactively plans and performs assigned audit engagements related to security, confidentiality, integrity, information protection and availability of data
- Conduct audit & evaluate in alignment to the supply cyber security control framework.
- Ensure effectiveness of approved controls and drive risk remediation or changes from previous audit for existing certified suppliers
- Inform and advise business leaders on supplier's information security risks
- Provide subject matter expertise in third-party risk management.
- Post audit assessment reports and update stakeholders on findings
Qualifications :
Bachelor's degree in science & Engineering or technical discipline is required.6+ years of information security & audit experience with increased responsibilitiesIn-depth knowledge of security assessment / audit principlesUnderstanding of networking principles and data protectionAbility to identify problems, analyze data and present conclusions.Strong verbal, written and presentations skillsKnowledge of information security frameworks such as ISO 27001 / NIST CSF is preferred.CISA, CISSP, CISM, certifications are preferred.Excellent English communication skills.Able to work as part of a virtual global team with cultural, language, and time zone differences.Able to deal with ambiguity and work independently with minimal supervision / guidance.