Security Engineer

                Security Engineer

Duties and Responsibilities:

Analyze and identify gaps in the implementation of controls

Familiarity with compliance standards and frameworks

Work with stakeholders to design, implement, enforce and monitor compliance to organizational controls.

Conduct medium to high complexity vendor risk assessment

Design, track and monitor risk treatment plan

Conduct gap analysis for compliance with a wide range of frameworks/standards

Working experience with a wide range of compliance standards and frameworks

Identify and correlate enterprise-wide risks and vulnerabilities and work with other units to determine the overall

risk landscape.

Manage the risk register and coordinate risk treatment strategies among stakeholders

Participates in the application and implementation of operational risk, technology and tools, and governance processes

and application to create legacy solutions for minimizing losses from potential risks.

Lead and manage a GRC team, if necessary (Senior level)

Able to manage executive level stakeholders

Requirements:

Minimum of 4 years of experience in an Information Security, IT or Financial risk/auditing

position.

Strong experience in information security governance, consultative stakeholder

management, and strategic planning.

Experience in management with enterprise risk assessment and annual Security Risk

Analysis plan development.

Adept in evaluating controls including information security, change management,

data center, business continuity, and other associated risk exposures.

Deep understanding of information security framework, processes, standards, compliance

and best practices.

Demonstrated consultative approach to driving change and deploying controls.

Relevant industry certification is highly desirable.

Excellent knowledge of methodologies, processes and tools associated with supporting

this function effectively.

Experience in managing and holding discussion with executive stakeholders

Self-Motivated, and able to work independently as well as on a team.

Strong / accurate written and oral communication is important.

Previous experience in international organizations, and financial sector or equivalent

is an asset.