The Role
Provides advanced information security policy analysis, develops security policies and workforce awareness training, advises stakeholders on policy compliance, assesses and manages technology and privacy risks, implements security controls and frameworks, evaluates vendor security offerings, monitors compliance, and coordinates GRC goals and improvement strategies.
Summary Generated by Built In
Position Information:
Under the general guidance of the Chief Information Security Officer (CISO) and in cooperation
with the Security Team Lead, this position is responsible for providing advanced security policy
analysis. This position is responsible for developing and maintaining information security
policies and workforce training and awareness. This position serves as a resource for staff and
leaders regarding information security policy implementation, interpretation, and compliance
This position may lead projects to implement new security controls. This position will also have
daily, weekly, and monthly duties operating security control systems in place at ETF. It will
monitor compliance with security policies and procedures.
Required Skills:
• IT Security – 5+ years
• IT Professional – 8+ years
• Project leadership experience – 4+ years
• Experience evaluating and implementing vendor security offerings – 4+ years
• Strong attention to detail
• Excellent communication skills (written and verbal)
Preferred:
• CISSP or equivalent – 1 year
Regular duties may include the following representative tasks:
• Information Security Risk Assessment: Identifies, analyzes, evaluates, and documents
information security risks and controls based on established risk criteria.
• Risk Management: Measure, monitor and manage risks related to the use of Information
Technology, Information Security, Privacy, Regulatory Compliance, and Governance.
Ensures and monitors compliance with industry and government rules and regulations at
all levels.
• Control Implementation: Assist the security team to conduct gap analysis and
implements frameworks and standards such as ISO 27001, NIST, and CSC. Engage
with your stakeholders to identify issues, understand their needs and challenges to
proactively find ways the program can support those needs.
• Coordination: Provides coordination to the GRC team by setting goals, objectives,
performance metrics, and ensuring that the team is aligned with the organization’s
mission3. Develops strategies to improve the effectiveness of the GRC program.
Requirements
Required Skills:
IT Security – 5+ years
IT Professional – 8+ years
Project leadership experience – 4+ years
Experience evaluating and implementing vendor security offerings – 4+ years
Strong attention to detail
Excellent communication skills (written and verbal)
Nice to have:
• CISSP or equivalent – 1 year
Skills Required
- 5+ years of IT security experience
- 8+ years of IT professional experience
- 4+ years of project leadership experience
- 4+ years of experience evaluating and implementing vendor security offerings
- Strong attention to detail
- Excellent written and verbal communication skills
- CISSP or equivalent certification with 1 year of experience
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Novalink Solutions LLC is a global consulting, engineering, and AI product development company specializing in information technology and telecommunications. They provide AI-powered products, automation platforms, intelligent workflow systems, IT consulting, managed engineering, and staff augmentation services.
