Must Have Skills Skill 1 - Any recognized security certifications, e.g., CISSP, CISA, CISM Skill 2 - Monitor internal and external threat landscape to update strategy and intellectual protection program roadmap
Skill 3 - Provide periodic reports to management team and key stakeholders
Roles and Responsibility • Demonstrate strong knowledge in IT controls, risk assessments, and testing of security measures • Identify opportunities to continuously innovate and improve the program and value delivered to organization • Ensure successful completion of the annual supplier cybersecurity assessment. • Perform on-site control validation to ensure the highest impact suppliers have the proper cybersecurity controls in place. • Independently and proactively plans and performs assigned audit engagements related to security, confidentiality, integrity, information protection and availability of data • Conduct audit & evaluate in alignment to the supply cyber security control framework. • Ensure effectiveness of approved controls and drive risk remediation or changes from previous audit for existing certified suppliers • Inform and advise business leaders on supplier's information security risks • Provide subject matter expertise in third-party risk management. • Post audit assessment reports and update stakeholders on findings
Qualifications: • Bachelor's degree in science & Engineering or technical discipline is required. • 6+ years of information security & audit experience with increased responsibilities • In-depth knowledge of security assessment/audit principles • Understanding of networking principles and data protection • Ability to identify problems, analyze data and present conclusions. • Strong verbal, written and presentations skills • Knowledge of information security frameworks such as ISO 27001 /NIST CSF is preferred. • CISA, CISSP, CISM, certifications are preferred. • Excellent English communication skills. • Able to work as part of a virtual global team with cultural, language, and time zone differences. • Able to deal with ambiguity and work independently with minimal supervision/guidance.
