Senior IT Security Assessor

Unified Women's Healthcare•UNAVAILABLE, Florida

About The Position

The Senior IT Security Assessor is responsible for planning, executing, and reporting on IT audits, and enterprise-wide cybersecurity and IT risk assessments to evaluate the effectiveness of security controls and protect the confidentiality, integrity, and availability (CIA) of organizational systems and data. This role focuses on risk-based security assessments, technical control evaluation, and regulatory and compliance requirements while partnering with technology and business teams to improve control maturity.

Requirements

Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field (or equivalent experience)
5+ years of experience in IT audit, cybersecurity, or IT risk
Experience with security assessments and control evaluations
Strong understanding of IAM, vulnerability management, and network security
Familiarity with Windows, Linux, and Mac environments
Knowledge of core security and compliance frameworks including NIST, ISO 27001, CIS Benchmarks, SOC 2, HIPAA, HiTRUST and PCI DSS frameworks

Nice To Haves

One or more relevant Information security-related certifications preferred (e.g., CISSP, CISA, CCSP, CISM, etc.)

Responsibilities

Lead and perform IT security and cyber risk assessments across infrastructure, applications, and cloud environments
Evaluate security controls aligned to NIST, ISO 27001, CIS, HIPAA, SOC 2 Type 2, HiTRUST and PCI DSS frameworks
Assess identity and access management (IAM), privileged access, authentication, and authorization controls
Review system configurations, security baselines, change management processes, and technical security standards
Evaluate network security controls including firewalls, IDS/IPS, and segmentation
Partner with business stakeholders to evaluate third party services and track any remediation efforts needed
Design and execute risk-based assessment programs and walkthroughs
Develop executive-ready reports and communicate findings to stakeholders
Provide recommendations and partner with key stakeholders to improve control design and security posture
Mentor junior team members and collaborate with cross-functional teams
Document runbooks and processes
Other duties as assigned.