Requirements

• 5+ years of experience in information securityand privacy audits and risk/gap assessments.
• Knowledge of Cloud Security concepts, techniques, tools, methods and best practices including DLP, encryption, vulnerability management, GRC,segregation of duties, IT infrastructureand software change management, security, availability, incident handling, and data transmission integrity.
• Understanding of technology use, trends and risks in a business context and environment.
• Ability to communicate complex security risks to non-technical staff
• Ability to develop and track key performance indicators (KPIs) and metrics for benchmarking and operational success
• Strategic mind-set to ensure a clear focus on the go forward agenda and the ability to apply risk based decisions balancing cost/opportunity and risk.
• Knowledge of keysecurity and privacyprinciples and standards including SOC 2, PCI-DSS, BSI, and regulatory requirements (GDPR, etc.).
• Experience with Questionnaire-based Interviews and Investigations, Technical writing of Policies, SOPs and Guidesand authoring tools such as Adobe RoboHelp
• Capable of producing high quality output and documentation with attention to detail and following best in class design and delivery methods, tools and standards.

The ideal candidate will also have the following qualifications and skills:

• Business acumen and track record of working with internal teams and external parties to see the “big picture”, understand technical architectures, perform gap analysis against requirements and achieve business goals.
• Knowledgeable in Cloud Security, Application and Web Application Security and the concepts, techniques, tools, methods and practices used to secure them
• Demonstrated self-starter qualities of independence, initiative and creativity.
• Organized and execution/results oriented with excellent planning and multi-tasking abilities.
• Strong verbal and written communication skills and ability to influence others.

14 Aug 2017 -save job - original job