• Task-oriented, able to prioritize work or escalate issues to management;
• Working side by side with architects, engineers, and project managers to ensure application and infrastructure security and compliance;
• Reviewing processes and practices enterprise-wide to ensure the use of compliant practices, procedural efficiency, and accuracy;
• Preparing and assembling work papers by documenting audit tests and findings. Following up and reporting on the status of outstanding audit recommendations from prior audits;
• Develop security awareness by providing orientation, educational programs, and on-going communication to all levels of staff;
• Execute vulnerability and penetration tests on infrastructure and applications;
• Respond to security questionnaires from auditors, clients, and third parties;
• Update job knowledge by participating in educational opportunities, reading professional publications, etc.

Required Candidate profile

• Security+ certification or similar;
• Additional security certifications (CISSP, CISM, etc.) are a big plus;
• Minimum of 1-3 years' experience in information systems security or IT audit;
• Knowledge of corporate infrastructure (servers, endpoints, networks);
• Knowledge of Sophos AV, and DLP solutions a big plus;
• Familiarity with hands-on security technologies including devices, services, and systems that prevent, detect and respond to security threats;
• Knowledge of Information Security best practices;
• Familiarity of Linux and Windows environments;
• Excellent interpersonal skills and ability to communicate with all levels of management;
• Strong written and oral communication skills; and
• An excellent communicator and team-player.