Vulnerability Management Consultant Position Available In Newton, Georgia

Job Description:

Mandate Skills- Quality & Cloud Security Experience Required:

Min 13years

Roles and Responsibilities:

Review Projects and theirtechnical design documents for Information security risks andadvise on suitable controls and mitigations at early stages of theprogram Fair understanding of Technology Landscape ApplicationsInfrastructure Cloud and review Clients information security andrelated threats and vulnerabilities legal and regulatoryrequirements Good Understanding on Security Standards like

ISO270012 SOX ITGC

SOC1 or SOC2 DevSecOps OWASP top 10 Business Impactanalysis

ISO 22301 ISO 27005

Assess and classify all potentialbusiness and infrastructure information risks Review and advise oninformation security risks of vendor offerings new leveragingexisting

SAAS PAASIAAS

services including integration with Clientenvironment Conduct risk assessment on Applications Network Systemsaccording to Client policies applicable Standards legal regulatoryrequirements Identify the risks in the Client Projects providerecommendations for remediation of identified risks TranslateTechnical legal and Regulatory Compliance obligations into acohesive collection of Security Controls and provides therespective stakeholders with the IRM requirements and itsimplementation methodologies Identify or design the controls forimplementation based on the outcome of Risk Assessment itsremediation and residual risk Ensure all the controls outlined foran application Infrastructure are designed effectively ReviewVulnerability Assessment and Penetration Test scan results andrecommend the risks to be remediated Review and approve the controldesign of supplier and their organization technical specificationsagainst Client security control requirements Ensure all the risksare documented classified and tracked with appropriate action asper the IRM standards Work with Project Managers Business AnalystsArchitecture and Support Team to ensure Client Information RiskManagement standards are being followed Test the controleffectiveness post implementation or deployment of controls andtechnologies Conduct Security governance with Clientstakeholders