Senior Specialist - Risk Assessment

Job summary

Overview ComputaCenter TeraMach proudly supports a variety of clients in the delivery of critical cyber architecture initiatives. Responsibilities The Specialist is required to provide expertise in cyber architecture area and assist with the planning and execution of assigned projects. Standard responsibilities include: Perform threat modeling exercise and security control design analysis, architecture and design reviews, coordinating with various stakeholders to integrate secure by design principles Assist in setting the cyber strategy and architecture standards for new developments Engage w…

Job details

Overview ComputaCenter TeraMach proudly supports a variety of clients in the delivery of critical cyber architecture initiatives. Responsibilities The Specialist is required to provide expertise in cyber architecture area and assist with the planning and execution of assigned projects. Standard responsibilities include: Perform threat modeling exercise and security control design analysis, architecture and design reviews, coordinating with various stakeholders to integrate secure by design principles Assist in setting the cyber strategy and architecture standards for new developments Engage with technology teams across the organization to build alignment on key projects and initiatives; and develop strategy and cyber architecture execution roadmaps Create solutions that balance business requirements with information and cyber security requirements Evaluate projects, systems, applications, network and tools for compliance to cyber and architecture standards Provide subject matter expert support/consultation to RFP design and evaluations, as directed Other cyber related risk assessments and security reviews as directed by management Qualifications Must have experience writing detailed risk assessment reports and presenting to senior leaders (8+ years) – Must be prepared to provide written sample reports Expert knowledge in Application, Infrastructure and System security controls(8+ years) Hands-On Experience conducting security risk assessment (10+years) Experience conducting and reviewing application vulnerability assessment/penetration tests (5+years) Current experience in Cloud Security and the evaluation/review/RFP of cloud based service such as Amazon Web Services, Salesforce in a public sector environment Experience working in the government/public sector (4+ years) Experience implementing Security policies, procedures and processes (4-8 years) Current experience in external contract/vendor RFP (both Cloud and on Premise): security requirements, evaluation, due diligence and review (5+ years) Strong understanding of common vulnerability frameworks (CVSS, OWASP Top 10). Strong understanding of Internet security, networking protocols and Internal Control Frameworks. Professional designation in at least two of the following CISSP, CISA, CISM, CRISC, CCSP or PMP Current Government Security Clearance is desirable Advanced knowledge of security standards such as ISO 27001/27002, CIS, NIST, ISO 27018, COBIT and Cloud security frameworks

What you’ll do

The Senior Specialist is responsible for providing expertise in cyber architecture and assisting with project planning and execution. Key tasks include performing threat modeling, engaging with technology teams, and evaluating compliance with cyber standards.

Requirements

Candidates must have extensive experience in risk assessment and security controls, with a strong background in cloud security and government sector work. Professional designations such as CISSP or CISA are required, along with a solid understanding of vulnerability frameworks.

Listed skills

• Control · Preferred
• Évaluation · Preferred
• assessment · Preferred
• analysis · Preferred
• Organization · Preferred
• Teams · Preferred
• Compliance · Preferred
• Execution · Preferred
• Planning · Preferred
• management · Preferred
• Amazon Web Services · Preferred
• Salesforce · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Risk Assessment
• Cyber Security
• Threat Modeling
• Security Controls
• Cloud Security
• Application Security
• Infrastructure Security
• Vulnerability Assessment
• Penetration Testing
• Government Sector Experience
• Security Policies
• ISO Standards
• NIST
• CISSP
• CISA
• CISM