Job Description
We are looking for a Quality Assurance Executive with 2-3 years of working experience. The ideal candidate will help in the implementation of security controls, risk assessment framework, and programs that align with regulatory/standards requirements, ensuring documented and sustainable compliance that aligns and advances business objectives.
Job Description
- Evaluating risks and developing security standards, procedures, and controls to manage risks.
- Improving security positioning through process improvement, policy, automation, and the continuous evolution of capabilities.
- Implementing processes, such as GRC (Governance, Risk and Compliance), to automate and continuously monitor information security controls, exceptions, and risks.
- Developing reporting metrics, dashboards, and evidence artifacts in excel, word or a tool approved by LMKR.
- Scheduling and performing regular risk assessments and effectiveness and efficiency of controls and creates GRC reports.
- Updating quality and security controls and providing support to all stakeholders on security controls covering internal assessments, regulations, protecting Personally Identifying Information (PII) data.
- Performing and investigating internal and external information security risk and exceptions assessments. Assessing incidents, vulnerability management, scans, patching status, secure baselines, penetration test result, phishing, and social engineering tests and attacks.
- Documenting and reporting control failures and gaps to stakeholders, as well as providing remediation guidance and preparing management reports to track remediation activities.
- Assisting other staff in the management and oversight of security program functions.
- Training, guiding, and acting as a resource on security assessment functions to other departments within the organization.
- Remaining current on best practices and technological advancements and acts as the company’s technical resource for security assessment and regulatory compliance.
- Performing other related duties as assigned.
Required Skills
- Able to perform Vulnerability Assessment
- Able to perform Qualitative/Quantitative analysis
- Able to prepare workflows, policy and procedures, processes, checklists, guidelines
- Able to perform Risk Assessment
- Good in tools sightsee and R&D
- Qualitative/Quantitative analysis
Education/Qualifications
- Minimum Graduate Degree in Computer Information Systems or related discipline
- MS CS or IS will be preferable