Lead the security training and awareness program by launching periodic training for specific groups within the organization; lead the phishing program by launching simulated phishing campaigns across the entire organization to increase user awareness. Lead the vendor risk management program by conducting security risk assessments on third parties and assisting with contract reviews to ensure necessary security controls are in place.
Numbers & Facts
Location
San Francisco, California
Description
Perform information security, IT regulatory, and privacy risk assessments on cloud and internal technology environments and systems.
Lead the vendor risk management program by conducting security risk assessments on third parties and assisting with contract reviews to ensure necessary security controls are in place.
Lead ongoing compliance of ITGC controls for SOX by coordinating with external auditors and internal stakeholders.
Lead the security training and awareness program by launching periodic training for specific groups within the organization; lead the phishing program by launching simulated phishing campaigns across the entire organization to increase user awareness.
Manage and drive risk remediation activities with internal customers and third parties.
Manage the ServiceNow Change Management module to help comply with ITGC change management controls.
Document internal security policies, standards, and procedures as needed.
Contribute to other GRC programs, such as PCI DSS, GDPR, CCPA, and NIST Cybersecurity Framework (NIST CSF) compliance, as needed.
Build and cultivate positive working relationships with internal customers outside of Information Security.
Develop and maintain IT risk management metrics and reports.