Information Security Specialist

Join our team as an Information Security Specialist, where you will play a crucial role in supporting enterprise-wide cyber risk management and governance activities. You will collaborate with global teams to assess risks, implement security controls, and contribute to the development of information security policies. Additionally, you will support regulatory compliance efforts and enhance the efficiency of security processes. This position requires a strong foundation in information technology, internal controls, and cybersecurity risk management practices.

• Support enterprise-wide cyber risk management and governance activities, collaborating with global teams to assess risks and implement security controls.
• Develop and maintain security policies, procedures, and guidelines according to industry best practices and regulatory requirements, conducting regular security controls testing.
• Conduct comprehensive risk assessments to identify potential risks in the organization’s IT infrastructure, overseeing the lifecycle of any security risks.
• Bachelor's degree in Cybersecurity, Computer Science, or related field. 2+ years of experience in information security risk management or similar role
• CISSP, CRISC, CISM or other related security certifications
• Proficient in using Microsoft Teams, Excel, PowerPoint, Word and AI tools (Copilot, ChatGPT and others)
• Flexibility in work given and ability to actively research how to perform new tasks
• Experience using and administrating GRC tooling. Proficient with Windows and Linux, including Active Directory and EntraID
• Strong analytical, good organizational, effective communication, and presentation skills
• Experience with GenAI coding assistance and leveraging AI to improve processes
• Knowledge and expertise with a wide range of security/risk management governance, guidance, compliance concepts and documentation such as NIST 800-53, NIST Cybersecurity Framework (CSF), ISO or equivalent