Associate Security & Privacy Risk Management Specialist
Location : Missouri (Remote)
Position Details :
Under moderate supervision, configures, administers, and launches user access review campaigns. Confirms accuracy by completing quality assurance reviews against validation lists and launched campaigns and promptly and thoroughly addresses any discrepancies through additional campaigns and documentation.
Responsibilities
Principal Duties
- Conduct periodic access reviews and audits to ensure compliance with security policies and regulations.
- Deliver and present control evidence to internal auditors.
- Contribute to the planning and execution of Audit finding remediation.
- Work among various teams within the Identity and Access Management (IAM) department to validate, analyze, and articulate user access controls.
- Develop automated capabilities that support proactive control monitoring, evidence gathering and reporting.
- Ensure the effective testing of all IAM controls, as well as provide timely accurate reporting of the results.
Requirements
Required Experience
- Hands-on knowledge in staging access review campaigns in IdentityNow across Active Directory, Databases, Workday, Servers, and more.
- Experience with compliance frameworks such as Sarbanes-Oxley Act (SOX), Service Organization Controls 2 (SOC 2), National Institute of Standards and Technology (NIST), and Health Insurance Portability and Accountability Act (HIPAA).
- Understanding of information risk management concepts and proven ability to meet strict audit deadlines.
- Advanced knowledge of Identity management concepts, practices, design, and implementation
- Advanced oral and written communication skills demonstrating ability to share and impart knowledge
- Ability to quickly adapt to new methods, work under tight deadlines and stressful conditions
- Advanced investigative, analytical and problem solving skills
- Advanced ability to set goals and handle multiple tasks, clients, and projects simultaneously
- Ability to appropriately balance priorities, deadlines, and deliverables
- Ability to work well within a team environment and participate in department / team projects
- Ability to balance detail with departmental goals / objectives
- Advanced ability to translate business needs and problems into viable / accepted solutions
- Advanced skills in customer relationship management and change management
- Ability to manage multiple projects or teams and set applicable goals
- Advanced negotiating and persuasion skills
- Ability to liaise with individuals across a wide variety of operational, functional, and technical disciplines
Work Experience
- Preferred : 2-4 years experience with SOX / SOC1 / SOC2 audits over Se
Associate Security & Privacy Risk Management Specialist
Associate Security & Privacy Risk Management Specialist. Understanding of information risk management concepts and proven ability to meet strict audit deadlines. Advanced skills in customer relationship management and change management. Conduct periodic access reviews and audits to ensure compliance...
Security Risk Associate
A company is looking for a Security Risk Associate to join their Information Security team. ...
Risk Management Framework Specialist
Training and awareness of system, contractors are required to complete annual refresher IT Security Awareness training as well as additional security training based on their Security Specialist roles and responsibility. Risk Management Framework Specialist. In this role you will support Security and...
Security Risk Management Lead
A company is looking for a Security Risk Management Lead to join their Security Risk Management team. ...
Senior Staff Security Engineer | AI Risk Specialist
We are seeking an AI System Risk Architect to ensure we’re adequately identifying, assessing, and mitigating security risks associated with the deployment and operation of artificial intelligence (AI) systems. Articulate technical AI security risk in business terms to facilitate acceptance of risk w...
Third Party Risk Management Specialist - Remote
Third Party Risk Management Specialist is responsible for assessing the risk introduced by the nature of the relationship established with our suppliers, and the effectiveness of the suppliers’ controls to mitigate that risk to CSAA tolerance. The specialist’s objectives include supporting a reducti...
Associate Asset Management Specialist - Supply Chain Planning
Associate Asset Management Specialist - Supply Chain Planning. The Asset Management Specialist will be responsible for supply chain planning and execution activities in support of Fighter Aircraft for United States Air Force (USAF) contracts. Procurement, Supplier Management, Supply Chain, Material ...
Compliance Nurse Specialist (RN)
Assists in education of clinicians and billing staff to support compliance with third party documentation and billing standards. Works on joint projects with other internal compliance staff to resolve billing and documentation issues. ...
Section 508 Compliance Specialist
A company is looking for a Section 508 Compliance Specialist to ensure digital accessibility and compliance with federal standards. ...
Sr Content and Policy Analyst
You'll be a member of the Content and Policy Analyst that define content standards and outline policy and inclusion criteria for our FCC and Trade Compliance business. You will support the management of our World Compliance data, specifically the maintenance and dissemination of our researcher-facin...