Security Risk Associate

November 4

Apply Now

Receive Emails with Similar Jobs

KBRA

WebsiteLinkedInAll Job Openings

Credit Ratings • Financial Research • Credit Analysis • ABS • CMBS

501 - 1000

Description

• We're seeking a Security Risk Associate to join our growing Information Security team. • This role can be based in our Dresher, PA office or Remote and reports to the Senior Security Risk Manager. • Occasional travel to our NYC office is required. • Assist with managing KBRA’s information security governance, risk, and security compliance as KBRA continues to grow and expand. • The goal is to create culture of 'Yes' and enable the organization to think secure.

Requirements

• Certifications: CISSP, GSEC, CISA, CRISC or 3 years direct hands-on experience within the information security and risk management field. • Have a strong background in information security governance, risk, and compliance. • Knowledge and hands on experience with table top exercises • Have the drive and tenacity to follow through and find the root of an issue. • Strong communication skills to communicate with the business and customers. • Can work independently and cross business team projects. • Have performed risk and compliance assessments, including vendor risk assessments. • Have participated in customer audits. • Knowledge of a SOC 2 Type II framework, GLBA, NIST CSF, and ISO 27001 requirements. • Knowledge of ESMA, FCA and SEC requirements as they relate to cyber security and operational resilience (DORA) • Belong to an industry group to keep up with threats and risks (ISSA, ISACA, Infragard, SANS, FS-ISAC, etc.) • Knowledge of security architecture, cloud security and can understand technical architecture conversations. • Have written security policies, standards, and procedures for security operations and the organization. • Are great at stakeholder management and influencing skills • Detail-oriented and adept at creating documentation • Can work with and manage people across multiple disciplines to assure the various aspects of information security governance, risk, and compliance are being met • Are autonomous and self-driven • Have excellent written and verbal communication skills

Benefits

• Competitive benefits and paid time off • Paid family and disability leave • 401(k) plan, including employer match (100% vested) • Educational and professional development financial assistance • Employee referral bonus program