Risk Assessor

Company: ADP
Location: Alpharetta
Posted on: April 8, 2021

Job Description:

Security Risk AnalystDescription:The Security Risk Management team is a key part of the Global Security Organization (GSO). We perform risk identification, assessment, control management, and audit management services to ensure key risks are assessed in a timely manner, that the appropriate controls are implemented to bring security risks to a reasonable level as defined by senior management, and prepares/represents the GSO during internal and external audits. Responsibilities:

• Perform annual and targeted security risk assessments based on the risks established within the enterprise risk register.
• Documents the identified risks, analysis results, and gaps by leveraging the Enterprise GRC tool.
• Facilitates the development and management of key risk scenarios in partnership with SMEs that are leveraged as part of the risk assessment process.
• Creates and maintains templates and standard operating procedures that align to applicable policy, standard, and compliance requirements.
• Reviews security related findings to identify control gaps and determine if a risk assessment is required.
• Assist security control owners with documenting, designing, and testing their controls.
• Acts as a SME to understand and keep abreast of changes to all security related audit and regulatory requirements and participates during security control design to ensure audit requirements are identified, mapped, and commensurate to meet internal/external requirements.
• Monitors progress against the security strategy to identify current state and future state program targets, develops dashboards, and reports status as necessary.
• Established asset criticality requirements to establish an asset profile strategy and works to align all related security controls to the enterprise model to drive prioritization.
• Manages and governs security findings and associated risk management processes by leveraging the Enterprise GRC tool.
• Other assignments may be assigned to support security risk management projects and transformation efforts.
• 
  Requirements:
  • 1-3 years of exclusive experience performing risk assessments across data protection, cybersecurity, physical security, fraud and/or other technology domains.
  • Four-year degree in information systems, computer science, or other related technology field, or a regionally accredited bachelor's degree with more than ten years of technology or security audit experience.
  • Demonstrated ability to work well in both an individual contributor and team capacity with a global team.
  • Applied industry accepted security frameworks and standards, such as COBIT 5, ISO 27001, ISO 27005, NIST Cybersecurity Framework, and NIST 800-53.
  • Able to evaluate and analyze complex data to assess risk and formulate sound decisions and justifications.
  • Able to interact in a professional manner and develop relationships with individuals and teams at any level.

Keywords: ADP, Alpharetta , Risk Assessor, Other , Alpharetta, Georgia