Security Engineer

1. 3-5 years of experience in Information Security, IT general controls, IT compliance, IT Assessments or IT audit.
2. Knowledge of security and risk frameworks, standards, best practices (e.g., HITRUST CSF, NIST CSF, ISO/IEC 27001, COBIT).
3. Self-starter with effective written and verbal communication skills and strong critical thinking skills.
- Other Required Skills/Experience:
1. Ability to tailor communication style to the audience.
2. Experience in coordination and execution of the audit lifecycle.
3. Strong problem-solving and decision-making ability.
4. Experience in testing IT controls across various platforms.
5. Ability to frame and deliver messages based on listener's experience and level.
6. Strong organizational skills and ability to multitask effectively.
7. Self-directed and seeks guidance when needed.
- Education/Certifications:
1. Undergraduate degree (4-year) preferred but not required.
2. Masters (e.g., MBA, MSIS, MIS) degree preferred but not required.
3. Five years of combined IT experience including two years in IT security.
4. Experience in Information Security, IT general controls, IT compliance, IT assessments or IT audit.
5. CISSP, CISA, CPA/CA, CISM or other equivalent certification preferred but not required