TekWissen LLC
Location
Boston, Lincolnshire | United Kingdom
Job description
Overview
Tekwissen Group is a workforce management provider throughout the USA and many other countries in the world. The below job opportunity is to one of Our clients who is a global leader in analytical testing deliver a comprehensive portfolio of complete solutions systems software consumables and onsite and online services with one overarching purpose: to help make the world healthier cleaner and more sustainable.
Job Title: IT Security Architect (NonExempt)
Duration: 9 Months
Location: Boston MA 02118
Job Type: Contract
Work Type: Hybrid
Job Description:
Purpose
Client is searching for a Risk and Compliance Analyst to join our risk and compliance program.
As part of the CISO function directly reporting to the Head of Risk and Compliance the Risk and Compliance Analyst will support the design and operation of our compliance program supporting a 1B in revenue global manufacturing and services business.
The successful candidate will have the opportunity to partner with a global risk and compliance team in Boston Massachusetts; Pune India; and Rodgau Germany.
The security and compliance team will collaborate regularly within a client office location.
The successful candidate will bring expertise and leadership across risk and compliance disciplines including control design and operation risk management third party audits such as SOC 2 ISO 27001 UK Cyber Essentials Plus and FedRAMP security sales enablement third party vendor risk management customer and vendor security contract reviews and the development of policies and procedures.
This role requires a strong work ethic the right blend of technical and nontechnical skills and the ability to align security decisions to business requirements across leadership within a global organization.
Responsibilities
Ensuring the successful design implementation documentation and operation of information technology general controls.
Implement control best practices and business unit security ownership across the client organization.
Partner closely with other team members within the CISO function within the areas of security architecture and engineering and security incident response and threat intel to ensure alignment with the crossteam requirements.
Build a risk management program and governance risk and compliance council that aligns to ISO 27001.
Assist global sales and presales teams in responding to customers security and compliance related inquiries and questionnaires.
Complete SOC 2 Type 2 UK Cyber Essentials Plus ISO 27001 audits and incorporate additional audit standards as the needs of the business evolve.
Evaluate client requirements for CMMC 2.0 compliance and build a roadmap and business case.
Lead the development maintenance and review of information security policies and procedures.
Collaborate with business stakeholder across client including but not limited too R&D Quality Management and Operations.
Work cross functionality with the legal team regarding data privacy and security contract reviews for vendors and customers.
Support US Federal Government CMMC 2.0 and FedRAMP compliance as needed.
Support security investigations and responding to information security incidents.
Mentor and coach junior team members.
Support information security awareness activities.
Nothing in this job description restricts managements right to assign or reassign duties and responsibilities of this job at any time.
Basic Qualifications
bachelors degree in accounting Computer Science Information Systems or related field.
13 years experience in Risk and Compliance.
Experience in at least two of the following audits/regulations: SOC 1 SOC 2 SOC 3 ISO 27001 ISO 27017 ISO 27018 ISO 27701 FISMA FedRAMP SOX 404 HITRUST CSF HIPAA ISO 9001 GxP 21 CFR Part 11 GAMP 5 EU Annex 11 NIST
Requirements.
English language proficiency
Potential Travel 10%
Preferred Experience
Masters degree
Public Accounting IT Audit experienc
Experience with cloud multicloud hybridcloud and onprem technology architecture
AWS and Azure Cloud IaaS expertise
CISSP CISM CISA CIA or similar certifications preferred
Technology Expertise Preferred
Amazon Web Services (AWS) and Microsoft Azure (AZURE)
Operating Systems: Windows & Linu
DP SSO MFA Microsoft Okta
IGA SailPoint Saviynt
PAM Beyond Trust Saviynt CyberArk
MDM Intune JAMF Workspace One
GRC Service Now
Atlassian Suite JIRA & Confluence
TekWissen Group is an equal opportunity employer supporting workforce diversity.
Job tags
Salary
