SENIOR SECURITY CONTROLS ASSESSOR - BUREAU OF TECHNOLOGY (ACTIVELY RECRUITED)

Cook County•Chicago, IL

6d•Hybrid

About The Position

Test and evaluate controls within systems or organizations to ensure proper implementation, functionality and achievement of desired outcomes. Assess the quality of risk management processes to identify security and privacy strengths and weaknesses, developing strategies to address deficiencies. Conduct security control assessments, identify vulnerabilities, analyze policies, recommend enhancements, and prepare detailed assessment plans and reports to improve security posture. The Senior Security Controls Assessor position is a highly technical function in the Information Technology (IT) field.

Requirements

Graduation from an accredited college or university with a Bachelor's Degree or higher
Four (4) years of technical security control assessment, design, information security audit, risk management, policy design and development experience or directly related experience
Valid driver's license is required
Knowledge of complex principles and practices for a specialized area of focus.
Knowledge of information security frameworks: NIST Risk Management Framework (RMF), Health Insurance Portability and Accountability Act (HIPAA), Criminal Justice and Information Services (CJIS), etc.
Knowledge of network, server, and data storage architecture, operations, and protocols.
Knowledge of application development methodologies and regulatory regulations.
Ability to independently guide staff in area of specialization to drive business success.
Ability to provide in-depth insight, advice and expertise to other professionals, management, and external contacts in an assigned functional area.
Ability to operate as a senior team member and communicate advanced specialized knowledge to team members, leaders, and external stakeholders.
Must be legally authorized to work in the United States without sponsorship.

Nice To Haves

Possession of one of the following professional certifications: CRISC, CISA or CGRC is preferred.

Responsibilities

Test and evaluate controls within systems or organizations to ensure proper implementation, functionality and achievement of desired outcomes.
Assess the quality of risk management processes to identify security and privacy strengths and weaknesses, developing strategies to address deficiencies.
Conduct security control assessments, identify vulnerabilities, analyze policies, recommend enhancements, and prepare detailed assessment plans and reports to improve security posture.