Compliance Engineer/Manager - IT Security Strategy

Role Overview: As an IT Security Compliance Specialist at LotusFlare, your primary responsibility will be to conduct regular assessments of IT systems, processes, and controls to identify vulnerabilities and ensure compliance with security standards. You will also play a crucial role in conducting Privacy Impact Assessments (PIA) for various projects, contributing to the development, implementation, and maintenance of IT security policies, procedures, and guidelines. Furthermore, you will be tasked with identifying, assessing, and mitigating IT security risks through proactive measures and incident response. Your collaboration with auditors, promotion of security awareness, participation in incident response activities, and evaluation of the security posture of third-party vendors will be essential in maintaining a secure IT environment. Key Responsibilities: - Conduct regular assessments of IT systems, processes, and controls to identify vulnerabilities - Perform Privacy Impact Assessments (PIA) for various projects - Assist in the development, implementation, and maintenance of IT security policies - Identify, assess, and mitigate IT security risks through proactive measures - Collaborate with auditors for IT security audits - Promote security awareness across the organization through training programs - Participate in incident response activities to address security incidents - Assess the security posture of third-party vendors to ensure compliance Qualifications: - Bachelor's degree in Computer Science, Information Systems, or a related field - 5+ years of experience in IT security compliance or a related role - Strong understanding of IT security frameworks such as ISO 27001, ISO 27701, NIST, and CIS - Knowledge of industry regulations including GDPR and CCPA - Experience with risk assessment methodologies and tools - Excellent analytical, problem-solving, and communication skills - Ability to work both independently and in a team setting - Professional certifications such as CISA, CISM, CISSP are a plus (Note: The additional details about LotusFlare being a company focused on IT security compliance and risk management, providing opportunities for professional growth and development in the field have been omitted as it is not explicitly related to the job role.),