Information Security Senior Specialist

Job Summary

The Information Security Senior Specialist is responsible for supporting the organization's cybersecurity, risk management, compliance, and information security initiatives. This role ensures that security controls, policies, and processes are effectively implemented to protect company assets and support regulatory and industry compliance requirements.

Key Responsibilities

• Conduct information security risk assessments and recommend mitigation measures.
• Support the implementation and maintenance of security policies, standards, and procedures.
• Perform vulnerability assessments and track remediation activities.
• Coordinate security audits, compliance reviews, and risk assessments.
• Investigate and support the resolution of security incidents.
• Assist with business continuity and disaster recovery planning activities.
• Conduct third-party/vendor security reviews and assessments.
• Partner with IT and business teams to improve the organization's security posture.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• At least 3 years of experience in Information Security, IT Risk, IT Audit, Compliance, or Cybersecurity.
• Experience in vulnerability management, risk assessment, and security compliance.
• Familiarity with information security frameworks and standards such as ISO 27001, COBIT, ITIL, or similar.
• Strong analytical, communication, and stakeholder management skills.

Preferred Certifications

• CISSP
• CISM
• CEH
• CompTIA Security+
• ISO 27001 Lead Implementer/Auditor

Key Skills

• Information Security Governance
• Risk & Compliance Management
• Vulnerability Assessment
• Security Incident Management
• IT Audit & Controls
• Business Continuity & Disaster Recovery
• Third-Party Risk Management