This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We’re looking for a skilled IT Security professional to assess and strengthen security and technology controls across our business and IT environments. This role is critical in ensuring our organization maintains a strong risk posture while balancing operational efficiency.
Job Responsibility:
Conduct reviews and document the effectiveness of security and technology controls
Assess control environments through interviews, documentation analysis, and workflow evaluations
Recommend and assist in implementing risk mitigation strategies through policies, procedures, and technical safeguards
Collaborate with risk management and security leaders to align controls with organizational risk appetite
Identify strengths and gaps in controls related to privacy, security, resilience, and compliance
Advocate for improvements that enhance security without compromising business operations
Support control development and implementation across testing, QA, and production environments
Prepare and present reports on control effectiveness to senior leadership
Stay informed on regulatory changes, internal policies, and industry best practices
Requirements:
Hands-on experience with risk management and IT control frameworks
Bachelor’s degree in Information Assurance, Computer Science, Engineering, or a related technical field preferred but not required
2+ years of hands-on experience in Information Security and/or enterprise GRC
Expertise in IT Risk assessment, evaluating technical control sets, and determining the effectives of IT policies, procedures, controls, and systems
Cybersecurity certifications such as CySA+
Identify weak points in IT Controls and implements plans of action to remediate and improve
Strong knowledge of risk frameworks (CRI, COSO, ISO, COBIT, NIST)
Familiarity with regulatory standards (PCI, FFIEC, SOX, GDPR, CCPA, GLBA)