It Security Risk Management Consultant - Remote

Location Remote

Job Type Full Time/ Contract

Work Authorization No Sponsorship

The A.C. Coy company has an immediate opening for a IT Security Risk Management consultant. Ideal candidates must have 5+ years of experience in risk management and/or information security and 5+ years of experience with regulatory compliance and information security management framesworks (ISO27000, COBIT, NIST).

• Assist with assessing various tools/platforms for risk management
• Assess controls to effectively manage information risks as needed
• Prepare an implementation plan for the policy, framework and tool/platform. Utilize other GRC and Security Team resources for the implementation plan
• Ensure that deployment of new risk tools integrates with existing tools and data standards
• Assist with the development of a security risk strategy and framework that can be utilized with the IT and Automation Systems
• Assist with communication plan and communications throughout all levels of the organization
• Create the framework of standardized procedures to categorize, identify, evaluate, and manage risks for implementation/use by the organization
• Develop and document a Risk Management Strategy and Standard

Experience Required

• Can interface with, and gain the respect of, stakeholders at all levels and roles in the company
• Knowledge of risk and control identification and assessment
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropria
• Experience with regulatory compliance and information security management frameworks (e.g., International Organization for Standardization [IS0] 27000, COBIT, National Institute of Standards and Technology [NIST] 800) - 5+ years
• Experience in a risk management and/or information security role - 5+ years
• Experience in use of GRC management tools - Ex. ServiceNow risk module, AuditBoard, Archer, etc.
• Experience with risk monitoring and reporting dashboards
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), and/or Certified in Risk and Information Systems Control (CRISC) - Preferred