Experience in coordinating and leading all aspects of complex Technology projects
Ability to effectively influence others to account for the plans and collaborative behaviors for results
Ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner
Ability to identify and assess the cybersecurity threats, risks and controls to cost-effectively mitigate risks
Ability to react to high pressure dynamic changing environments
Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part
Ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one’s network within an organization
Ability to apply original and innovative thinking to produce new ideas and create innovative products, solutions, or approaches
Discipline and interpersonal skills to work well in a global environment, complementing teams in multiple remote locations
Degree in Business, Computer Science, Information Security, or a related field
4+ years Information Security experience
2+ years with risk advisory
Experience with information security management frameworks (e.g., ISO27000, COBIT, NIST 800, etc.)
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Certified
Responsibilities
Providing consultative advice to information security customers that enables them to make informed risk management decisions
Identifying appropriate controls to effectively handle information risks as needed
Finding opportunities to improve risk posture, developing solutions for remediating or mitigating risks and assessing the residual risk
Maintaining strong working relationships with individuals and groups involved in handling information risks across the organization
Identifying and assessing the severity and potential impact of risks and communicate/assess/implement solutions in a way that influences optimum risk mitigation
Supporting the documentation of Information Security Policies and Standards
Assessing the risk and providing governance of high-risk security related requests
Assisting with pre-M&A information security reviews
Reviewing of security components of technology changes, and other security risk related areas