Senior Security Analyst

Description
Risk assessment: Perform risk assessments and identify and prioritize risks to information security and cybersecurity including SaaS Security Audit

Compliance: Ensure compliance with regulations and policies, and assess compliance against industry frameworks, including ISO 27001, SOC 2

Security controls: Implement and monitor security controls, and test their effectiveness, Create Risk Register

Documentation: Document and report on compliance levels, control failures, and gaps

Training: Train and guide other staff on security assessment functions

Collaboration: Collaborate with other stakeholders, such as internal and external auditors, to review and resolve findings

Policy development: Develop and revise policies, standards, processes, and guidelines

Vendor risk assessment: Conduct vendor risk assessments

Research: Conduct research to aid threat assessment or risk mitigation activities

Knowledge of Risk Register SaaS Security Audit and ServiceNow IRM Module.