Information Security Engineering Consultant

Caring. Connecting. Growing together.

This position will be at the helm of the center of excellence within the Enterprise Security Risk Office, responsible for overseeing customer-related activities by working closely with executive leaders to integrate security strategies into customer interactions.

Primary Responsibilities:

• Support the build out and maintenance of the center of excellence (COE) team
• Create new reports and maintain/update reports
• Engage with teams to burn down security risks within the enterprise
• May partner with ESRO teams like engineering to ensure accurate and completeness in reporting
• Pull and update security package read out reports for CIOs
• Support fast follow surveys/questionnaire, track progress working closely with XISOs and their support staff
• Support other ESRO assessments (such as NIST, NYDFS, EIRA, etc) in tracking, follow-up and direct assistance to XISOs if required
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications:

• Bachelor's degree in Information Security, Computer Science, Business Administration, or a related field
• 4+ years of experience in information security, risk management, or compliance, with some exposure to team collaboration or project coordination
• 1+ years of proven analytical, reporting and problem-solving skills, with the ability to identify and address pain points and satisfaction drivers with data
• Familiarity with security frameworks (such as NIST, ISO 27001), data privacy laws (such as GDPR, CCPA), and general industry practices
• Demonstrated ability to work effectively with cross-functional teams and contribute to security-related projects
• Demonstrated solid communication and organizational skills

Preferred Qualification:

• Professional certifications such as CISSP, CISM, or CISA