Senior Cyber Security Specialist

About the Role

FICO is seeking a Cyber Security Engineer to join our GRC Team. This is a full-time regular position, offering an exciting opportunity for individuals with strong security compliance and risk management skills to grow in the field of Governance, Risk and Compliance.

Key Responsibilities:

• Perform audits, certification programs, and control assessments including scope planning, defining control procedures based on requirements, policies, and standards, control testing, mapping issues to risks, and socializing results.
• Coordinate audit-related tasks to ensure readiness of managers and their teams for audit testing and facilitate timely resolution of any audit findings.
• Develop strong knowledge of common security legal and regulatory requirements e.g., PCI, SOC, NIST, ISO/IEC 27001, COBIT.
• Work on compliance initiatives to ensure operational effectiveness with applicable laws and regulations as well as internal policies and procedures.
• Monitor activities of assigned IT areas to ensure compliance with internal policies and standards.
• Assist Corporate Compliance and Business with all required compliance/security-related documentation.
• Facilitate external audits to ensure compliance with all industry-mandated regulations.
• Participate in development and implementation of new business initiatives to ensure functionality required to support compliance.
• Provide guidance to business functions on compliance/security-related matters.
• Understand IT concepts including Cloud hosting, containerization, encryption, networking, operating systems, databases, middleware, and applications.
• Knowledge of or experience working with cloud technologies/environments AWS or other related cloud experience is required.
• EFFECTIVELY communicate to all levels of the organization including senior management and other stakeholders that influence the security and compliance posture.
• Able to assess nature of controls and identify automation opportunities for increased monitoring and scaling coverage.

Requirements:

• Bachelor's degree in Information Security Computer Science or a related discipline and/or certifications e.g., ISO 27001 LI/LA, ISA/QSA, CISSP, CISA, CISM, GIAC.
• Demonstrated ability to apply IT-related knowledge and experience in solving compliance issues.
• Experience implementing cloud security and compliance standards frameworks and controls (ISO/IEC 27001 SOC 2 PCI NIST) for cloud service delivery models (IaaS PaaS SaaS).
• AWS Certifications added advantage.
• Experience or understanding of governance risk and compliance (GRC) processes and solutions.
• Background in security controls auditing network and system security.
• Ability to express technical concepts in business terms.
• Able to work well under deadlines in a changing environment and complete multiple projects effectively and concurrently.
• Evaluate effectiveness of internal security control framework and recommend adjustments as business needs change.
• Regularly interact with all levels of management to present and discuss audit results and obtain gap remediation status.

We Offer:

• An inclusive culture reflecting our core values Act Like an Owner Delight Our Customers and Earn the Respect of Others.
• The opportunity to make an impact and develop professionally by leveraging your unique strengths and participating in valuable learning experiences.
• Highly competitive compensation benefits and rewards programs encouraging you to bring your best every day and be recognized for doing so.
• An engaging people-first work environment offering work/life balance employee resource groups and social events to promote interaction and camaraderie.