Information Security

Job Description: As a Security Risk Assessor, your main responsibility will be to conduct third-party/supplier security risk assessments. This includes interpreting security assurance reports like SOC2 and pen test reports, as well as reviewing security requirements in contracts. You will also need to have an understanding of outsourced solutions and associated information classification, assess supplier security controls based on ISO27001/2 standards, and identify and document security risks. Key Responsibilities: - Conduct third-party/supplier security risk assessments - Interpret security assurance reports such as SOC2 and pen test reports - Review security requirements in contracts - Understand outsourced solutions and associated information classification - Assess supplier security controls based on ISO27001/2 standards - Identify and document security risks - Suggest recommendations to address identified security risks - Potentially perform information classification such as AIC assessment Qualifications Required: - At least 4 years of experience in Information Security - Possess security certifications such as ISO27001 auditor/implementation, CISSP, CRISC, CISM, or CISA,