Future Opening: Site Security Auditor: Los Angeles Metro REMOTE

Independent Security Evaluators • Los Angeles, CA

40d • $70,000 - $110,000 • Remote

About The Position

The Site Security Auditor at ISE will assist in the growth of our media and entertainment vendor audit program. The role involves performing site assessments of services facilities, driving client security through knowledge of security protocols and demonstrating responsible cybersecurity practices, conducting meetings with clients and their vendors, creating audit plans, identifying security gaps based on industry best practices, documenting and presenting findings, evaluating and developing recommendations, and collaborating with leadership to adjust policies and practices. The goal is to ensure vendors comply with industry best practices and maintain a strong overall security posture.

Requirements

• One year of experience within the last four years in Media & Entertainment industry audit experience.
• Reside in Los Angeles, California metro area
• Knowledge of security audit frameworks, practices, tools, and techniques.
• Auditors should possess analytical and technical knowledge together with interviewing, interpersonal and presentation skills.
• Experience with Motion Picture Association (MPA) Best Practices and how they are integrated in vendor locations.
• Minimum of two years of experience conducting IT audits covering Content Security, Cyber Security, Information Security, and/or Information Systems.
• At least one active information security, cybersecurity, and/or IT audit certification below: CompTIA Security+, CASP+, PenTest+; EC-Council CEH; GIAC GSEC, GISF, GWAPT, GISP; ISACA CISA, CISM, CRISC, CGEIT, CDPSE, CSX-P; ISC2 CISSP; PECB ISO 27001 Certified Auditor.

Nice To Haves

• Experience reading and illustrating architecture and network diagrams.
• Understanding of the principals of information security policies, business continuity plans, and industry control requirements as they pertain to the security of the content.
• Ability to identify gaps and develop recommendations around operations, policy management, and physical and digital security.
• Knowledge of compensating controls or alternatives due to restraints such a budget, employment, nature of content, etc.
• Strong writing, communication, logistics/time management, professionalism.
• Ability to travel internationally.

Responsibilities

• Perform site assessments of services facilities, which conduct workflows at physical premises, including commercial and residential scenarios.
• Drive client security through knowledge of security protocols and demonstrating responsible cybersecurity practices, including risk management, control implementation, ISMS implementation, and business continuity management, among other topics, to build a stronger overall security posture.
• Conduct meetings with clients and clients’ vendors’ employees, while addressing the vendors’ security policies, workflow, physical, and digital security parameters.
• Create audit plans to test key controls and verify compliance.
• Assess the severity of identified weakness and the impact of the risk involved.
• Identify security gaps based on Motion Pictures Association (MPA) Best Practices and other best practice and standard bodies, understand any underlining causes or related impact, and how to address them.
• Document and present audit findings, observations, and conclusions to internal and external stakeholders.
• Evaluate and develop recommendations to ensure vendors compliance with industry best practices.
• Collaborate with leadership to develop adjustments to existing policies and practices in order to address gaps within business processes and within the audit process.
• Ensure completion of the project within the agreed-upon level of effort and time frame.

Benefits

• Flexible schedule
• Work from home option
• Unlimited vacation
• $0 health premium plan option, including spouse and family.
• Opportunities to research and publish, speak at major security events and conferences.
• Leadership and peers that support and mentor you
• Paid training, workshops, university courses, certification courses

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed