Specialist, Cyber Security, Assurance & Compliance

Job Description

Apply now

Specialist, Cyber Security, Assurance & Compliance

Finance

Posting Start Date: 6/29/26

Posting End Date: 7/28/26

Job Summary

The cybersecurity assurance and compliance role provides independent measurement and reporting of the organizations cybersecurity compliance in alignment with corporate cybersecurity polices and standards, as well as with external regulations and compliance frameworks. The goal is to ensure the implementation, operations, and effective delivery of cybersecurity controls to meet policy and operational expectations. The role coordinates with the cybersecurity architect to ensure all IT and OT assets, services, and operations are compliance with internal policies, and with external regulators to ensure compliance to legal and contractual obligations. The role is responsible to perform continuous assessment, capturing gaps and communicating them to the risk team, who will log them in the risk register and track them to closure.

Job Responsibilities

• Coordinate with external regulatory bodies and industry groups to capture requirements that ensure adherence to regulatory requirements.
• Coordinate with the cybersecurity architecture role to capture requirements and ensure adherence to internal policies and standards.
• Coordinate with Legal and Procurement teams to capture contractual requirements we have committed to others.
• Coordinate with Legal and Procurement teams to capture contractual requirements others have committed to us.
• Manage regulatory mappings for all geographies of business operations to understand which regulations are applicable, including when and where.
• Establish and maintain a compliance and assessment program aligned to the companys selected frameworks and methodologies.
• Manage and maintain a periodic assurance testing cycle based upon business criticality, regulatory exposure, and business risk.
• Develop and maintain evidence requirements and quality standards needed to prove cybersecurity compliance and assurance.
• Develop, implement, maintain, and operate processes to collect evidence, assess evidence, and report on cybersecurity compliance and control effectiveness.
• Coordinate with stakeholders to report compliance and effectiveness gaps, and follow-up through closure to ensure active progress on addressing gaps.
• Manage and maintain a register of assurance findings, coordinating with business stakeholders to identify and complete corrective actions and plans.
• Independently validate remediation of all findings prior to formal closure.nal services for provisioning and deprovisioning of all identities.
• Prepare and execute internal and external audits.
• Provide evidence governance for audits, regulators, customers, and contractual attestations.
• Coordinate internal/eternal audit remediation tracking.
• Govern, enable, manage, and maintain operational services for access management, including privileged access, just-in-time access, and supporting controls such as multi-factor.
• Coordinate with cybersecurity risk function to ensure any assurance/compliance gaps are captured as cybersecurity risks where relevant.
• Develop and/or procure training and awareness material in regard to internal and external cybersecurity compliance.
• Conduct training sessions to promote compliance awareness within the organization.
• Identify key areas to test and report on compliance and awareness.
• Act as a focal point on major IT and OT projects where high assurance is required per policies and standards, to define assurance controls and criteria to be implemented by the project.
• Design, implement, and execute assurance control testing and validation programs.
• Identify external assessment needs, such as penetration testing, red team testing, ... and establish contracts, services, and relationships as needed to have such tests conducted, integrating results as part of the overall assurance and assessment program.
• Interface with regulators and ensure all cybersecurity reporting obligations are met.
• Leverage assessment results to drive feedback into strategic and operational teams to enhance control effectiveness.
• Implement improvement processes to reduce compliance, audit, and assessment findings over time.

Job Requirements

• BS or MA in computer science, information security, cybersecurity or a related field
• 7+ years It audit, cybersecurity assurance, or other compliance roles.
• Experience with regulatory environments
• Control testing and audit execution
• Working with external auditors and regulators
• Strong knowledge of cyber security framework and controls
• Audit & Testing
• Regulatory & Compliance knowledge
• Risk assessment
• Vendor assurance
• Analytical and Risk-based decision making
• Communication and Influence
• Planning and Organizing
• Personal leadership

Apply now