Requirements:
Seeking a Security Analyst – Governance Resource, with broad security and governance-based backgrounds to join the Enterprise Security team. The preferred resource should have a minimum of 5 years of recent and practical governance experience, and a minimum of 3 years working as part of a security team. The resource will need to show a broad understanding of security principles, practices, and security trends. The proposed resource(s) MUST have experience working in security governance and business continuity, demonstrated experience in governance risk and compliance, experience with regulations and standards, show what experience they have with preparing and maintaining policies and standards, and Security Certification (CISSP, CISM, CISA). Technical experience to coincide with the security governance experience would be considered an asset.
Deliverables:
1. Experience creating, maintaining and updating a governance framework.
2. Experience working with Information Technology or ICS\SCADA.
3. Conducting Third Party Security Risk Assessments.
4. Complete Security Compliance Reviews and acting on concerns identified.
5. Preparing and maintaining security processes and procedures.
6. Investigating industry standards. Recommending improvements to security policies, processes and procedures.
7. Conducting Threat & Risk assessments.
8. Support Internal and External Audits.
9. Document, define and manage risks and risk exceptions.
10. Demonstrated Experience in Governance, Risk, and Compliance.
11. Change management compliance monitoring and reporting.
12. Ability to work as part of a team as well as independently.
13. Developing and managing Cyber Security awareness and training program.
14. Strong communication and interpersonal skills.