Job Description

Information Security Governance & Risk Specialist
The Information Security Governance & Risk Specialist job identifies and manages potential information security risks to the environment by conducting control assessments, vendor due diligence and identifying remediation action plans to mitigate cybersecurity risks. Working under close supervision, this role also supports the overall program and process execution of the supplier risk management team and business information security office to drive improvements to minimize possible risk exposure to the organization. _x000d_

Key Responsibilities and Duties

• Learns to conduct cost/benefit evaluation of cloud solutions compared to virtual private networks, dedicated hosting, and in-house solutions.
• Supports the technical feasibility assessment of adopting external cloud based IT platform and infrastructure services within the organization.
• Helps identify portions of the organization's IT platform/infrastructure with the highest potential return for cloud deployment.
• Supports the organization's global strategies and initiatives to enhance Information Technology plans, operations and procedures.
• Faces problems that are not typically difficult or complex.
• Explains facts, policies and practices related to the job area.

Minimum Qualifications

• Foundational understanding of information security principles, regulatory requirements, and risk management
• Knowledge of Governance, Risk, and Compliance frameworks

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Information Technology or a related field
• Industry certifications - Security+, CISA, CAPM

Educational Requirements

• University (Degree) Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level
5IC

Qualifications

Posting end date - 8/8/26