Specialist Information Security

Job Overview

Our client is seeking an experienced and detail-oriented Specialist I – Information Security to support security governance, compliance assessments, and operational risk management activities within enterprise technology environments.

The ideal candidate will have hands-on experience in technology risk management, IT audit, cybersecurity operations, compliance assessments, and remediation coordination. This role requires strong collaboration with cross-functional teams, technology stakeholders, and asset owners to ensure compliance with internal controls, security standards, and regulatory requirements.

The candidate should possess a strong understanding of IT infrastructure, application security concepts, governance processes, and enterprise security operations while contributing to continuous process improvement and operational excellence.

Key Responsibilities

Operational & Compliance Support

1. Coordinate with technology factory teams to execute assessments as part of BAU (Business-As-Usual) security processes
2. Work closely with Technology Asset Owners (TAOs) to evaluate and implement required control processes
3. Conduct security and compliance assessments based on defined SOPs, policies, and control frameworks
4. Identify security risks, control gaps, and non-compliance issues across applications and infrastructure
5. Track remediation activities and collaborate with stakeholders to ensure timely closure
6. Perform periodic compliance reviews and proactive assessments to improve security posture
7. Maintain accurate tracking, reporting, and status updates for ongoing assessments and remediation activities
8. Support audit and regulatory compliance initiatives through documentation and evidence collection

Risk Management & Security Governance

1. Understand and apply technology risk management principles and internal security control frameworks
2. Analyze assessment deviations and prepare remediation plans aligned with documented procedures
3. Assess applications and infrastructure components against established security controls
4. Maintain inventory and documentation related to applications, controls, risks, and remediation activities
5. Ensure compliance with organizational security standards and governance requirements
6. Assist in identifying process optimization, automation, and operational efficiency improvements

Stakeholder & Process Management

1. Communicate assessment findings and compliance results to business and technical stakeholders
2. Collaborate with infrastructure, application, and security teams on remediation planning and execution
3. Manage BAU workflow tickets using JIRA and related tools
4. Maintain and update knowledge repositories in Confluence or similar collaboration platforms
5. Support continuous improvement initiatives within security operations and governance processes

Mandatory Skills

1. 5–10 years of experience in:
2. Information Security
3. Cybersecurity Operations
4. Technology Risk Management (TRM)
5. IT Audit
6. IT Compliance
7. Security Governance
8. Strong understanding of:
9. Information security controls and governance
10. IT compliance and audit processes
11. Technology risk management principles
12. Security assessment and remediation processes
13. Hands-on experience with:
14. JIRA workflow management
15. Confluence documentation
16. ServiceNow and/or Archer platforms
17. Security assessment tracking and reporting
18. Functional knowledge of:
19. Operating systems (Windows/Unix/Linux)
20. Networks, firewalls, LDAP, Active Directory
21. Databases and cloud environments
22. Authentication and authorization concepts
23. APIs, interfaces, logging, and monitoring
24. Application architecture and design principles
25. Data classification and application criticality
26. Experience preparing reports, dashboards, and documentation using:
27. MS Excel
28. Word
29. PowerPoint
30. Visio
31. PDF tools
32. Strong analytical, documentation, and problem-solving skills
33. Ability to understand and follow documented operational processes and SOPs
34. Strong communication and stakeholder management capabilities

Good to Have Skills

1. Exposure to cloud security and cloud governance
2. Experience with automation or process optimization initiatives
3. Knowledge of cybersecurity frameworks and standards
4. Experience supporting audit or regulatory assessments
5. Understanding of enterprise security architecture
6. Project management or coordination experience
7. Exposure to risk and compliance platforms

Preferred Candidate Profile

1. Detail-oriented with strong organizational skills
2. Ability to manage multiple assessment and remediation activities simultaneously
3. Strong collaboration and cross-functional communication skills
4. Self-driven learner with the ability to adapt to evolving security requirements
5. Proactive mindset toward operational improvements and risk reduction

Tools & Technologies

1. JIRA
2. Confluence
3. ServiceNow
4. Archer
5. MS Office Suite
6. Visio
7. PDF Tools

Certifications (Preferred)

Any industry-recognized certifications such as:

1. Microsoft Certifications
2. Cloud Certifications
3. Cybersecurity Certifications
4. IT Governance / Audit Certifications

Examples include:

1. Security+
2. CEH
3. ISO 27001
4. CISSP
5. CISA
6. AWS/Azure Security Certifications