Position: IT Security Assurance Specialist
Company: Motion Software
Experience required: 3y
Category: Security
English level: upper
Published: 2021-07-01T00:00:00+03:00

**Description**
The IT Security Assurance Specialist will be responsible for ensuring technology controls are sufficiently protecting business risk, through the application of the Technology Risk & Control framework, and overseeing security policies, standards, guidelines, and procedures.  

**Accountabilities**
- Participate in the development of new cybersecurity assessment and assurance practice services
- Conduct assurance testing on User Access Controls, Systems, Networks and Applications utilizing various security assessment tools and applications
- Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging technology/security threats against Flutter International business
- Provide support to the group second line Cyber Security Assurance Program
- Consult on Regulatory compliance requirements, reporting, and questions
- Provide support and consulting to the group third line internal and external audit function
- Preparation and support for Audits by composing management responses and appropriate remediation activities
- Contribute to the definition, development, and oversight of a global security management strategy and framework
- Provide consultation and advice to partners on a broad range of Technology Controls / Information Security programs/policies / standards and incidents for own specialized area
- Support the ongoing Technology Risk reporting, monitoring key trends, and defining metrics by regularly measuring control effectiveness
- Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise
- Define/develop/implement/manage standards, policies, procedures, and solutions that mitigate risk and maximize security, availability of service, efficiency, and effectiveness

**Qualifications**
- 3+ years in Cyber Security consultative role roles, preferably within large/multi-national organization
- Professional certification, one or more of the following: CISSP, CCSP, CISA, CRISC, CISM, CGEIT
- High degree of professionalism, work ethic, integrity, and passion for Information Technology and Security
- Proven leadership qualities and ability to build strong working relationships
- Self-directed with the ability to work independently, prioritize and execute autonomously
- A Team player with the ability to communicate and collaborate effectively across the organization and operate effectively with multiple cross-departmental teams towards a shared goal
- Strong problem solving and critical thinking skills

**Experience**
- Practical and deep knowledge of security risk management methodologies and frameworks
- Extensive cybersecurity consulting experience for large IT projects
- Experience in conducting assurance testing on User Access Controls (Identity and Access Management), Systems (Vulnerability Assessments), Networks (Firewall policy reviews), and Applications (Static and Dynamic Application Testing)
- Experience in assessing third-party service providers
- Experience with enterprise security platforms and architectural design
- Familiarity with the latest security vulnerabilities, advisories, incidents, penetration techniques, attack vectors, and countermeasures
- Strong understanding of cybersecurity concepts, protocols, industry best practices, strategies, frameworks, and regulations such as International Standards Organization (ISO) 2700x, NIST Cybersecurity Framework, Payment Card Industry Data Security Standard (PCI DSS), Sarbanes-Oxley (SOX)
- Understanding of the Software Development Life Cycle and Development Operations (DevOps) principals
- Experience working in Agile Framework a definite asset
- Demonstrated strong technical writing and communication skills

**What's in it for you**
GROWTH
- External & Internal Trainings - Courses
- Scholarships & Certifications - Workshops & Conferences
- Network of Experts

WELL-BEING
- Premium Health Insurance & Medical Assistance
- Gym Membership
- Recreational Facilities
- Adventure Sports and Sporting Equipment
- Weekly Team Activities
- Community Events & Regular Teambuildings and Travel

EQUIPMENT
- 24/7 Access to Fully-Equipped Offices
- Coworking
- Home Office Gear & Technical Equipment - Internet Connection & Office Supplies