Cyber Security Assessor

Jobtailor; Colorado; On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor in Colorado seeks an information security risk assessor to perform third‑party security reviews and help ensure readiness for assessments.

You will travel occasionally to collect documents, discuss gaps with vendors, and escalate risks while managing relationships with Enterprise Vendor Managers. This role requires collaboration across levels and strong knowledge of security controls and compliance frameworks.

Qualifications

• 3 years experience in Information Security and/or IT Audit.
• Technical writing and verbal communication skill.
• Ability to effectively work with partners at varying knowledge and organization levels.
• Ability to communicate clearly with both technology/development and business partners.
• Technical domains include Security Controls, IT Compliance, SOX Compliance, Change Management, and Enterprise Risk Management.
• Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards.

Responsibilities

• Performing information security reviews of third parties
• Occasionally travelling to work onsite with third parties to collect and review documentation
• Ensuring third parties are prepared for information security assessments
• Evaluating a third parties information security risk
• Discussing information security gaps with the third party
• Escalating issues or risks identified during the assessment
• Managing relationships with third parties and Enterprise Vendor Managers

Skills

Information Security

IT Audit

Security Controls

Infrastructure Security

Access Management

Physical Security

Application Security

IT Compliance

SOX Compliance

Change Management

Technical writing

Verbal communication

Relationship management

Effective collaboration

Clear communication

Job description

Responsibilities

• Performing information security reviews of third parties
• Occasionally travelling to work onsite with third parties to collect and review documentation
• Ensuring third parties are prepared for information security assessments
• Evaluating a third parties information security risk
• Discussing information security gaps with the third party
• Escalating issues or risks identified during the assessment
• Managing relationships with third parties and Enterprise Vendor Managers

Requirements

• 3 Years experience in Information Security and/or IT Audit
• Technical writing and verbal communication skill
• Ability to effectively work with partners at varying knowledge and organization levels.
• Ability to communicate clearly and effectively with both technology/development and business partners
• Technical skills include the domains of information security and business continuity including: Security Controls (Infrastructure Security, Access Management, Physical Security, Application Security, etc.) IT Compliance, SOX Compliance Change Management Enterprise Risk Management
• Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards

Hard Skills

• Information Security
• IT Audit
• Security Controls
• Infrastructure Security
• Access Management
• Physical Security
• Application Security
• IT Compliance
• SOX Compliance
• Change Management

Soft Skills

• Technical writing
• Verbal communication
• Relationship management
• Effective collaboration
• Clear communication