Advanced knowledge of PCI, NIST 800-53, NIST 800-171, NIST SP 800-154, or the Risk Management Framework (RMF).
Advanced understanding of networks, systems, data flows, and IT operations.
Advanced experience with data security and privacy regulations and common security tools.
Advanced knowledge of industry security, regulatory, and legal compliance considerations.
Ability to develop and maintain security policies, standards, and other related legal standards.
Expert experience with at least six security frameworks such as SOC 2, ISO, NIST, COSO, COBIT, PCI, or CIS.
Bachelor's degree in Information Security, Computer Science, Information Systems, Business, or a related field; or equivalent experience. Applicants without a degree but with relevant work experience and/or training will be considered.
CISSP certification.
IT security or corporate audit work experience — 6+ years.
IT experience working in one or more domains (Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, Software Development Security) — 6+ years.
