Risk Process Technical Specialist IV

Computer Task; Buffalo (NY); On-site; USD 90,000 - 130,000; Full time

Job summary

CTG, a Cegeka company, seeks a Risk Process Technical Specialist IV for a Buffalo, NY engagement. You will lead risk and control assessments, vulnerability management, and cybersecurity assessments, shaping standards and remediation workflows across teams and vendors.

You will develop and test requirements for scanning, testing, and compliance, while mentoring junior staff and aligning efforts with regulatory expectations. English communication required.

Qualifications

• Experience with vulnerability assessment tools and related technologies.
• Knowledge of cybersecurity standards and risk management processes.
• Experience documenting compliance and remediation workflows.
• Strong technical writing and analytical abilities.

Responsibilities

• Lead centralized risk and control assessment, vulnerability management, and cybersecurity assessment processes.
• Develop requirements for vulnerability scanning, penetration testing, server compliance, and static code analysis.
• Configure and continuously improve centralized cybersecurity assessment tools.
• Develop technical compliance standards, procedures, test scripts, and remediation workflows.
• Analyze results, identify deficiencies, and escalate remediation actions.
• Support vulnerability assessment and risk management activities.

Skills

Risk assessment

Vulnerability management

Cybersecurity assessment

Technical writing

Communication skills

Independent work

Team mentoring

Education

Associate degree

Bachelor’s degree

CISSP

CRISC

Archer VRM certification

Tools

Vulnerability scanning tools

Archer VRM

vRM platforms

eGRC

Incident Response

Job description

Are you ready to join a growing team?

CTG is seeking a Risk Process Technical Specialist IV for our client.

Location: Buffalo, NY
Duration: 9 months

Primary Responsibilities:

• Lead centralized risk and control assessment, vulnerability management, and cybersecurity assessment processes.


• Develop business and technical requirements for vulnerability scanning, penetration testing, server compliance, and static code analysis technologies.


• Configure, test, document, and continuously improve centralized cybersecurity assessment tools and processes.


• Develop technical compliance standards, operational procedures, test scripts, reporting processes, and remediation workflows.


• Analyze assessment results, identify control deficiencies, and establish escalation procedures for tracking and remediating cybersecurity findings.


• Support vulnerability assessment and vulnerability risk management activities.


• Partner with Technology teams, cybersecurity personnel, vendors, and other stakeholders to support assessment technologies.


• Research cybersecurity trends, emerging risks, industry best practices, and regulatory requirements and provide recommendations to management.


• Generate, collect, store, and retain audit and compliance data.


• Lead, coach, and mentor less-experienced Risk Process team members.


• Support budgeting, audit, regulatory, risk management, and internal control activities.

Education and Experience Required:

• Associate degree and 7+ years of relevant experience, or 9+ years of combined higher education/work experience including 7+ years of relevant experience.


• 7+ years of experience with vulnerability assessment tools, vulnerability scanning, cybersecurity risk management, or related technologies.


• Experience with vulnerability risk management platforms and cybersecurity standards.


• Experience with audit data, technical documentation, compliance, risk identification, and remediation processes.


• Strong technical writing, analytical, communication, and customer-service skills.


• Ability to work independently and provide technical direction to team members.


• Knowledge of Enterprise Risk Management, Risk Appetite, Risk Identification, cybersecurity controls, and regulatory requirements.

Preferred Qualifications:

• Bachelor’s degree.


• CISSP, CRISC, or other recognized cybersecurity certification.


• Experience with Archer VRM or other Vulnerability Risk Management lifecycle solutions.


• Working knowledge of eGRC and Incident Response.


• Strong technical writing and documentation skills.


• Detail-oriented with strong problem-solving and analytical abilities.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.

About CTG

CTG, a Cegeka company, delivers IT and business solutions that enhance clients’ digital agility, empowering them to seize new opportunities and overcome any challenge. Backed by more than 60 years’ experience and a commitment to being a reliable, results-driven partner, we work shoulder to shoulder with clients to shape digital together. Our vision is to be an indispensable partner to our clients and the preferred career destination for digital and technology experts. With more than 9,000 team members in over 15 countries, we combine global expertise with local insight to deliver innovative solutions. We operate across the Americas, Europe, and India, working with over 3,000 clients in many of today's highest-growth industries.

Together, we shape what’s next—working shoulder to shoulder to deliver impactful solutions for our clients and society. Our culture is built by the people who work at CTG, the values we hold, and the actions we take. It's a living, breathing thing that is renewed every day through the ways we engage with each other, our clients, and our communities. At CTG, you’ll find a workplace where you are encouraged to grow, supported in your ambitions, and empowered to shape your own career journey. For more information, visit www.ctg.com.

CTG will consider for employment all qualified applicants including those with criminal histories in a manner consistent with the requirements of all applicable local, state, and federal laws.

CTG is an Equal Opportunity Employer. CTG will assure equal opportunity and consideration to all applicants and employees in recruitment, selection, placement, training, benefits, compensation, promotion, transfer, and release of individuals without regard to race, creed, religion, color, national origin, sex, sexual orientation, gender identity and gender expression, age, disability, marital or veteran status, citizenship status, or any other discriminatory factors as required by law. CTG is fully committed to promoting employment opportunities for members of protected classes.