Senior Security Architect: Enterprise Risk & Compliance

Ultipro; Romsley CP; Remote; GBP 55,000 - 75,000; Full time

Job summary

Ultipro in the United Kingdom is seeking a security compliance and audit professional to coordinate control assessments across IT assets. You will collaborate with the client’s Audit Team to identify process improvements and ensure alignment with enterprise architecture and reference models.

Key duties include validating ISSO testing results for self-assessments, reviewing evidence, tracking false positives in scans, and advising on waivers and risk.

Qualifications

• Experience with reviewing security controls and evidence for annual self-assessment.

Responsibilities

• Identify unapproved technology components in the operating environment.
• Work with Audit Team to identify process improvements.
• Incorporate lessons from internal and external audits across IT systems.
• Validate ISSO self-assessment control testing results.
• Review artifacts for self-assessment testing.
• Review and track false positives in scan results.
• Review waiver documentation and advise on risk.
• Assess system changes for Security Impact Analysis.
• Coordinate with testing teams for common controls and external assessments.
• QA reviews of security documentation.

Skills

Automation tools usage

Audit coordination

NIST SP 800-53 guidance

Control testing review

False positives review

Security documentation QA

Waiver review recommendations

Security Impact Analysis coordination

Job description

Ultipro in the United Kingdom is seeking a security compliance and audit professional to coordinate control assessments across IT assets. You will collaborate with the client’s Audit Team to identify process improvements and ensure alignment with enterprise architecture and reference models.

Key duties include validating ISSO testing results for self-assessments, reviewing evidence, tracking false positives in scans, and advising on waivers and risk.