Senior Information Security Specialist

You will be responsible for the following tasks as part of the Vendor and Client Security team within the Information Security Department: - Complete client security questionnaires, respond to follow-up inquiries, and engage in client audits as requested by the business - Perform vendor security due diligence assessments by supplying security/privacy risk assessment questionnaires, evaluating responses, and generating final assessment reports - Conduct ongoing monitoring of critical vendors and collaborate with them on addressing identified vulnerabilities - Partner with business and other stakeholders to ensure risks are clearly communicated in a manner understandable by both business and technology audiences - Assist in tracking and closing out vulnerabilities identified by clients alongside the business - Review contracts and master service agreements to confirm the presence of appropriate security language upon request - Support the development, implementation, and upkeep of the Information Security program - Participate in internal and external audits related to SOC2, ISO 27001/27701, etc. as needed - Possess familiarity with standard Information Security policies to aid in annual reviews and updates - Undertake general administrative duties to support Information Security operations Qualifications required for this position: - Minimum 3-5 years of experience in Information Security roles - Bachelor's degree in a related field from an accredited college or university - Proficiency in written and verbal English communication - Comprehensive understanding of Information Security program development, maintenance, and governance - Strong research capabilities - Ability to plan and execute tasks with minimal supervision - Effective multitasking and task prioritization skills across various projects, adjusting to changing priorities - Excellent time management and organizational abilities - Strong personal integrity - Demonstrate dedication to achieving exceptional results - Flexibility to work varied hours in support of global business users - Previous experience with the ProcessUnity Vendor Risk Management Tool and Bitsight cybersecurity ratings practice is a plus About Kroll: In a world of disruption and complex business challenges, Kroll professionals utilize the Kroll Lens to bring clarity and truth to their clients. With sharp analytical skills and cutting-edge technology, Kroll professionals provide insights across various business areas. The organization values diverse backgrounds and perspectives to foster global thinking. Working as part of One team, One Kroll, you will contribute to a collaborative work environment that nurtures excellence. Kroll is a leading global valuation and corporate finance advisor specializing in complex valuation, disputes and investigations, M&A, restructuring, and compliance and regulatory consulting. The professionals at Kroll leverage analytical skills, market insights, and independence to assist clients in making informed decisions. The organization promotes a global mindset among its employees. Kroll is committed to equal opportunity, diversity, and merit-based recruitment. To be considered for a position, formal application through careers.kroll.com is mandatory.,