Senior Security Assurance Specialist

About the role

We are seeking an experienced Senior Security Assurance Specialist to independently evaluate and strengthen our information security controls across technology systems, business processes, project environments and third‑party services. The role works remotely and collaborates with Cybersecurity, IT, Risk, Compliance, Internal Audit and external partners.

Key responsibilities

• Develop and maintain the security assurance framework, methodologies and assessment procedures.
• Plan and conduct risk‑based assurance reviews of applications, infrastructure, cloud, networks, endpoints and operational processes.
• Assess design, implementation and operating effectiveness of controls against policies, contracts, regulations and industry frameworks.
• Identify control gaps, evaluate severity, prepare structured assurance reports and present findings to management.
• Track remediation actions, coordinate with owners, validate evidence and perform follow‑up testing.
• Support internal and external audits, provide evidence, facilitate walkthroughs and align assurance activities with audit plans.
• Assess compliance with ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls and other relevant standards.
• Review third‑party security questionnaires, due‑diligence records and contractual commitments.

Required profile

• Mid‑level to senior experience in security assurance, audit or risk assessment within complex, multi‑disciplinary environments.
• Strong analytical skills, sound judgment and ability to work collaboratively across diverse teams.
• Excellent written and verbal communication for reporting to senior stakeholders.

Required skills

• Knowledge of ISO/IEC 27001, NIST Cybersecurity Framework and CIS Controls.
• Experience assessing security controls for cloud, network, endpoint and data protection.
• Proficiency in conducting control testing, evidence validation and risk‑based reporting.