Associate Security Consultant TECHM-JOB-23355

Associate Security Consultant

Define, implement, and communicate Information Security Policies & Risk Services

Leads/Manages Information Security Risk Program Maturity through Identification, Analysis, Recommendation, Disposition and Validation efforts

Partnering with key technology and global organization stakeholders, develops and assists with cyber security strategy, roadmaps, and projects to continue long term cyber security resiliency through program maturity

Reviews strategy, roadmap, and business plan objectives in association with budget and risk tolerances to provide insight, direction and support of business drivers. Seeks opportunities to improve risk posture of organization

Completes research, development and implementation of moderate to complex information security initiatives; including review of policy, program, process, and technology improvements and solutions to ensure they are current and meet business needs

Works closely with governance and compliance peers to maintain relevance on trending legislation, regulatory affairs, and evolving risk

Organizes and maintains certain procedural tasks found within control self assessments, such as reviewing, analyzing, and challenging critical assets, associated ratings and security decisions with risk owners, recommending and supervising business department completion of action plans

Organizes and maintains certain procedural tasks found within third party assessments, such as working with third party to obtain due diligence artifacts, reviewing, and analyzing due diligence artifacts, reviewing and challenging results, recommending and discussing outcomes with key stakeholders

Tracks current and impeding laws, regulations and industry requirements and best practices, such as data protection, data privacy, cyber security, and information security. Translates requirements into practical mitigation solutions, and coordinates improvement plans

Gathers data, builds, analyzes, and reviews reports/dashboards on key risk management metrics with program stakeholders

Meet Key Performance Indicators/metrics for IT Service Management

Assists with requirements and coordinates improvement plans

Identify opportunities for process improvement including the development and implementation of best practices and continuous improvement initiatives for business unit

Other duties as assigned based on department and organizational needs

Government Careers

Show more