Informacje o stanowisku

As an Information Security Risk Management Specialist, you will be responsible for supporting application owners and providing consultancy and explanations related to security control objectives. Your role will include conducting information security risk assessments, analyzing security requirements, managing the remediation and exception processes, and ensuring timely implementation of agreed actions. You will also monitor and follow up on remediation efforts, assessing the effectiveness of solutions and ensuring compliance with established requirements.
Your tasks

• Supporting application owners by providing explanations and consultancy related to security control objectives
• Conducting information security risk assessments following defined processes, including gathering information, formulating security requirements, evaluating their implementation, and creating final reports
• Evaluating remediation and exception requests for assessed applications, taking into account requirements and risk
• Managing the remediation and exception process to closure, ensuring timely implementation of agreed actions
• Following up on agreed remediations and actions, including evaluating their effectiveness and closing the process
  

• Experience in Information Security Governance, including familiarity with NIST and ISO 27001 frameworks
• Proven experience in information security risk management (e.g., assessment of findings, evaluation of remediations, tracking of corrective actions, and follow-up)
• Ability to conduct information risk assessments, involving the identification, evaluation, and prioritization of potential threats
• Proficiency in planning, monitoring, and implementing corrective actions and exceptions effectively
• Strong communication skills, with the ability to provide clear advice on information security controls to various stakeholders within the organization
  

Białystok - Oferty pracy w okolicznych lokalizacjach