Technical Risk Assurance Analyst

Role & responsibilities

Your key responsibilities

• Conducts security assessments to measure the adequacy of existing information security controls. Identifies potential and actual system vulnerabilities and emerging strategic security needs, and recommends corrective measures.
• Consults with IT sub-divisions, third party partners, and business units in defining standard consistent reporting formats and providing standard data reports.
• Participates and documents evaluation and assessment of security requirements for data systems, networks, or websites.
• Leads technical support for assessments of assets, risks, and the implementation of appropriate data security procedures and products.
• Assists in the review, development, testing, and implementation processes for security plans, risk assessments, products and control techniques.
• Administers asset inventory and assessment schedules, and provides metrics on security consulting resources, assists with managing vendor relationships.
• Participates in special projects and performs other duties as assigned.
• Conducts regular vulnerability scans on networks and web applications, and performs password audits.
• Supports virus protection, intrusion detection, and security monitoring solutions.
• Assists in planning and implementation of disaster recovery procedures to maintain business continuity.
• Monitors access logs and flags anomalies indicative of possible security breaches.
• Contributes to secure design of systems and infrastructure by offering risk-based recommendations.

Preferred candidate profile

• Minimum 5 years of related work experience required.
• Undergraduate degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field. Graduate degree in Cybersecurity, Information Assurance, or Computer Science is preferred but not mandatory.
• Experience in IT security or application development preferred.
• Preferred certifications include CISSP, GSEC, GPEN, GWPN, CEH, or other equivalent credentials.
• Strong understanding of IT security controls, risk management, and system assessment practices.
• Practical knowledge of vulnerability scanning tools and security monitoring systems.
• Familiarity with secure coding principles and common system vulnerabilities.
• Experience preparing security reports and assessment documentation for varied stakeholders.
• Analytical mindset with attention to detail for identifying risks and anomalies.
• Strong collaboration and communication skills to coordinate with technical and non-technical teams.