Risk Process Technical Specialist IV
About The Position
CTG is seeking a Risk Process Technical Specialist IV for our client. This role involves leading centralized risk and control assessment, vulnerability management, and cybersecurity assessment processes. The specialist will develop business and technical requirements for various assessment technologies, configure and improve assessment tools, and analyze assessment results to identify and remediate control deficiencies. The position also supports vulnerability risk management activities, partners with technology teams and stakeholders, researches cybersecurity trends, and manages audit and compliance data. Additionally, the role includes leading and mentoring junior team members and supporting budgeting and risk management activities.
Requirements
- Associate degree and 7+ years of relevant experience, or 9+ years of combined higher education/work experience including 7+ years of relevant experience.
- 7+ years of experience with vulnerability assessment tools, vulnerability scanning, cybersecurity risk management, or related technologies.
- Experience with vulnerability risk management platforms and cybersecurity standards.
- Experience with audit data, technical documentation, compliance, risk identification, and remediation processes.
- Strong technical writing, analytical, communication, and customer-service skills.
- Ability to work independently and provide technical direction to team members.
- Knowledge of Enterprise Risk Management, Risk Appetite, Risk Identification, cybersecurity controls, and regulatory requirements.
Nice To Haves
- Bachelor’s degree.
- CISSP, CRISC, or other recognized cybersecurity certification.
- Experience with Archer VRM or other Vulnerability Risk Management lifecycle solutions.
- Working knowledge of eGRC and Incident Response.
- Strong technical writing and documentation skills.
- Detail-oriented with strong problem-solving and analytical abilities.
- Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.
Responsibilities
- Lead centralized risk and control assessment, vulnerability management, and cybersecurity assessment processes.
- Develop business and technical requirements for vulnerability scanning, penetration testing, server compliance, and static code analysis technologies.
- Configure, test, document, and continuously improve centralized cybersecurity assessment tools and processes.
- Develop technical compliance standards, operational procedures, test scripts, reporting processes, and remediation workflows.
- Analyze assessment results, identify control deficiencies, and establish escalation procedures for tracking and remediating cybersecurity findings.
- Support vulnerability assessment and vulnerability risk management activities.
- Partner with Technology teams, cybersecurity personnel, vendors, and other stakeholders to support assessment technologies.
- Research cybersecurity trends, emerging risks, industry best practices, and regulatory requirements and provide recommendations to management.
- Generate, collect, store, and retain audit and compliance data.
- Lead, coach, and mentor less-experienced Risk Process team members.
- Support budgeting, audit, regulatory, risk management, and internal control activities.
Benefits
- CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
Associate degree
