GRC Security Lead — Cloud Risk & Compliance

De Leon Consulting Group; Flower Mound (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

De Leon Consulting Group seeks a Senior Information Security Engineer to coordinate the Governance, Risk and Compliance program and align with security policies and processes. You will lead assessments, identify risks, and communicate posture to leadership as the domain specialist for Security Governance, Risk, and Compliance.

You will drive the Information Security Risk Program, craft methodologies and policies, and mentor security analysts while collaborating with engineering and business

Qualifications

• Experience implementing and assessing security in cloud-hosted environments.
• Strong knowledge of security technologies, information systems and risk assessment methods.
• Ability to learn new and evolving technologies in a fast-paced setting.
• 8+ years in technical roles with 5+ years in information security.

Responsibilities

• Lead and drive the Information Security Risk Program development and execution.
• Develop a Security Risk Assessment methodology, policy, strategy and process.
• Collaborate with local and remote security teams and owners to shape risk roadmap.
• Lead risk assessments and document significant information security risks across systems.
• Partner with Engineering on IT initiatives and security controls for efficiency.
• Drive remediation efforts and track closure of deficiencies.
• Advance GRC tools to share risk information with senior leadership.
• Provide expert-level security consulting to business partners.
• Maintain knowledge of standard methodologies and security trends.
• Identify opportunities for collaboration and alignment across the program.
• Mentor and train other security analysts.

Skills

Cloud security

Risk assessment

Security governance

Security standards (ISO/NIST/PCI)

Communication

Leadership & collaboration

Job description

De Leon Consulting Group seeks a Senior Information Security Engineer to coordinate the Governance, Risk and Compliance program and align with security policies and processes. You will lead assessments, identify risks, and communicate posture to leadership as the domain specialist for Security Governance, Risk, and Compliance.

You will drive the Information Security Risk Program, craft methodologies and policies, and mentor security analysts while collaborating with engineering and business