IT Risk Assessor from INSPYR Solutions

Title: IT Risk Assessor
Location: Spring, TX 77389 (Hybrid: 3 days onsite / 2 days remote) 
Duration: Long Term Contract 
Work Requirements: US Citizen, GC Holders or Authorized to Work in the U.S.

IT Risk Assessor

Responsible for ensuring information security best practices relating to issues such as: establishing and disseminating enforceable rules regarding implementation of IT standards and policy for systems; conducting/coordinating information security risk assessment and analysis; establishing reasonable security guidelines and measures to protect data and systems; assisting with monitoring and management of systems security vulnerability; conducting/coordinating information security audits (Assessment and Authorization processes) and oversight of the exception process; and assisting with investigations/resolution of problems and /or alleged violations of security policies

Job Duties/Roles

1. Perform risk analysis and intelligence information analysis to determine likely threats.
2. Perform security risk assessments (C&A, A&A, etc.) against new and existing systems and identify risks, issues, and mitigations. Evaluations will be against various compliance regimes to include NIST and ISO.
3. Conducting/coordinating information security risk assessment and analysis
4. Conduct audits of security architecture components and networked systems.
5. Use Cybersecurity intelligence and understanding of IT systems to inform decisions on policy, exceptions, and system/configuration reviews.
6. Prepare and deliver presentations to management teams and user groups.
7. Ensure continued compliance of company's IT systems and IT services with internal cybersecurity risk assessment policies, standards, and procedures.
8. Assist in the design and support of the internal cybersecurity education and awareness activities.
9. Monitor compliance with required policies, standards, and compliance regimes.
10. Monitor compliance with regular security awareness training for all employees.,
11. Facilitate the review of cybersecurity related documentation, processes and procedures performed by IT and non-IT staff.
12. Establishing reasonable security guidelines and measures to protect data and systems.

Soft Skills

1. Adaptable attitude
2. Stays positive through transformation with an eye on the end game
3. Has developed GRC programs and has been part of the maturation processes (building new processes, adopting new tools)
4. Can influence without direct authority. People-first mentality / focus on building relationships

• Comprehensive medical benefits
• Competitive pay
• 401(k) retirement plan
• ...and much more!