Risk Process Technical Specialist IV

Are you ready to join a growing team?

CTG is seeking a Risk Process Technical Specialist IV for our client.

Location: Buffalo, NY
Duration: 9 months

Primary Responsibilities:

• Lead centralized risk and control assessment, vulnerability management, and cybersecurity assessment processes.

• Develop business and technical requirements for vulnerability scanning, penetration testing, server compliance, and static code analysis technologies.

• Configure, test, document, and continuously improve centralized cybersecurity assessment tools and processes.

• Develop technical compliance standards, operational procedures, test scripts, reporting processes, and remediation workflows.

• Analyze assessment results, identify control deficiencies, and establish escalation procedures for tracking and remediating cybersecurity findings.

• Support vulnerability assessment and vulnerability risk management activities.

• Partner with Technology teams, cybersecurity personnel, vendors, and other stakeholders to support assessment technologies.

• Research cybersecurity trends, emerging risks, industry best practices, and regulatory requirements and provide recommendations to management.

• Generate, collect, store, and retain audit and compliance data.

• Lead, coach, and mentor less-experienced Risk Process team members.

• Support budgeting, audit, regulatory, risk management, and internal control activities.

Education and Experience Required:

• Associate degree and 7+ years of relevant experience, or 9+ years of combined higher education/work experience including 7+ years of relevant experience.

• 7+ years of experience with vulnerability assessment tools, vulnerability scanning, cybersecurity risk management, or related technologies.

• Experience with vulnerability risk management platforms and cybersecurity standards.

• Experience with audit data, technical documentation, compliance, risk identification, and remediation processes.

• Strong technical writing, analytical, communication, and customer-service skills.

• Ability to work independently and provide technical direction to team members.

• Knowledge of Enterprise Risk Management, Risk Appetite, Risk Identification, cybersecurity controls, and regulatory requirements.

Preferred Qualifications:

• Bachelor’s degree.

• CISSP, CRISC, or other recognized cybersecurity certification.

• Experience with Archer VRM or other Vulnerability Risk Management lifecycle solutions.

• Working knowledge of eGRC and Incident Response.

• Strong technical writing and documentation skills.

• Detail-oriented with strong problem-solving and analytical abilities.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.

To Apply:
To be considered, please apply directly to this requisition using the link provided. Kindly forward this to any other interested parties. Thank you!