Cybersecurity Controls Assurance Senior Manager

Candidates must possess a Bachelor's degree in computer science, management information systems, or equivalent experience, with over 3 years of experience managing IT auditors or Information Security control assessors. A minimum of 12 years in IT Audit or Information Security control assessments, including cloud security controls, is required, along with professional certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Auditor. Knowledge of standards like NIST 800-53, ISO 27001/27002, CIS Controls, and COBIT is essential, as is experience with automated and manual methods for evaluating security controls in both on-premise and cloud environments. Proficiency in communicating complex information and using partner feedback to improve processes is also necessary. Technical skills include knowledge of security tools like Sailpoint, Rapid7, Wiz.io, MS Defender, and experience with cloud security in AWS and Azure. Familiarity with automation, data-driven testing techniques, generative AI for control assurance, RSA Archer, ServiceNow, Kanban boards, and Jira is expected. Desired competencies include Big 4 consultant experience, knowledge of cybersecurity principles, mentoring junior team members, security reporting to senior management, applying security governance, risk, and control principles, proficiency in automation and data analytics tools (Excel, Tableau, Alteryx, PowerBI), and experience with Agile working methodology.