Senior Security Specialist

Job Summary:

The Senior Security Specialist is responsible for leading and supporting initiatives in Security Governance, Risk and Compliance, and Cyber Defense Operations. This role involves developing and implementing security strategies, policies, standards, and procedures, conducting comprehensive risk assessments, and managing compliance with various regulatory frameworks. The specialist will collaborate with teams to ensure robust security posture, mitigate risks, and support audit processes including IPC and OAGO audits.
Responsibilities:

Required Skills & Certifications:

• Minimum 8 years hands-on experience with IPC and OAGO audits.
• Minimum 5 years experience conducting comprehensive Threat and Risk Assessments using NIST CSF, HTRA, ISO 27001 frameworks.
• Strong knowledge of security governance, policy development, and compliance frameworks including PHIPA, SOC 2 Type II, and OAGO.
• Professional certifications such as CISSP, CCSP, CISA, CISM, or CRISC.
• Experience with risk management models and methodologies including HTRA and NIST CSF.
• Technical writing expertise for developing security policies and standards.
• Strong analytical, communication, and reporting skills to convey complex security concepts effectively.
• Deep understanding of IT security threats, vulnerabilities, and safeguards.
• Knowledge of security architecture and IT management frameworks such as SABSA and COBIT.

Preferred Skills & Certifications:

• 10+ years of experience in security domains including third-party risk management and IT audits.
• Bachelor's or Master's degree in Computer Science, Information Technology, Cyber Security, Systems, or related field.
• Familiarity with industry standards such as ISO 27001/27002, NIST, CIS, and COBIT.

Special Considerations:

• Strong focus on compliance with regulatory requirements and audit readiness.
• Ability to motivate and lead team members towards achieving security goals.
• Experience working in public sector environments is preferred.

Scheduling:

• Remote work arrangement.
• Standard business hours; specific shift details not provided.