Senior Security Risk Management Specialist

Let's talk about the Role

This global role within Resmeds Enterprise Security Group is responsible for ensuring the confidentiality, integrity, and availability of ResMeds information assets and computing infrastructure. We are seeking a seasoned and proactive Senior Information Security Specialist to lead security risk assessments across cloud environments, third-party vendor solutions, and AI/ML-enabled products.

The successful candidate will demonstrate strong technical expertise, risk analysis capabilities, and communication skills to engage independently with project teams, advise on secure design principles, and deliver high-quality reports that inform business decisions and support audit readiness.

This position requires close collaboration with enterprise security leadership, business stakeholders, and technical teams across diverse time zones and cultures to ensure alignment between security strategy and organizational objective.

Let's talk about Responsibilities

• Lead security engagement across global projects, ensuring alignment of security practices with business and technical goals.
• Conduct end-to-end security risk assessments for cloud-native and hybrid deployments, including architecture and control reviews for new implementations and managed services.
• Evaluate third-party (SaaS, PaaS, IaaS) products during onboarding and integration to ensure security and compliance requirements are met.
• Lead security reviews of AI/ML-based products, focusing on secure product design, guardrail enforcement, and risk mitigation.
• Collaborate with project managers, product owners, architects, and developers to embed security throughout the SDLC.
• Communicate security risks and mitigation strategies in business-relevant language.
• Produce and maintain high-quality documentation, including risk assessments, security summaries, and remediation recommendations.
• Track risks and controls using GRC tools, ensuring traceability and accountability.
• Stay current with emerging technologies, threats, and best practices in information security.
• Contribute to continuous improvement of internal security frameworks and processes.

Let's talk about Qualifications and Experience

Required Skills:

• 7+ years in Information Security, with at least 3 years in risk assessment or security advisory roles.
• Demonstrated excellence in verbal and written communication, with a strong track record of delivering clear, concise, and actionable reports.
• Proven ability to independently lead security assessments across diverse technologies.
• Extensive experience in Cloud Security, with deep expertise across key security domains including Secure Access, Data Encryption, Application and Network security, Data Loss Prevention, Endpoint Protection, CSPM, CASB, PAM, ZTNA, Logging and Monitoring, Vulnerability management, and Incident response.
• Experience in evaluating AI/ML systems from a security and ethical risk perspective.
• Experience with third-party/vendor risk management practices.
• Working knowledge of frameworks such as ISO27001, NIST CSF, CIS Controls and Benchmarks.

Preferred Skills

• Bachelor's/Master's degree in Computer Science, IT, Cyber Security or related field.
• Professional certifications such as CISSP, CISM, CCSP, CRISC, or AWS Security Specialty.
• Familiarity with regulatory and industry compliance framework, including SOC 2, GDPR, HIPAA, AI Risk Frameworks (NIST AI RMF, ISO/IEC 42001)
• Exposure and knowledge of AWS cloud security controls.
• Experience in healthcare or manufacturing environment is an advantage.