Full-Time Senior Control Assurance Assessor

As a Senior Control Assurance Assessor, you'll test security controls both on-premise and in the cloud to ensure design implementation, safeguarding Experian's assets. Assess control design, performance, and compliance with standards and regulations, reporting to the Information Security Control Assurance Testing Manager. Identify gaps, document findings, and recommend improvements to mitigate risks. Use data-driven testing techniques and a defined methodology to ensure controls meet current risks and regulatory requirements.

Primary Responsibilities

• Conduct security control assessments, using documented control activities and regulatory requirements.
• Develop test plans, test cases, and procedures, applying data from security tools to capture evidence.
• Use queries and dashboards to identify potential control failures.
• Ensure accuracy and timely completion of control testing, providing peer review.
• Document findings, including root cause analysis and recommendations for remediation.
• Serve as primary liaison with partners, delivering clear progress updates and results.
• Contribute lessons learned by integrating partner feedback to improve the control testing program.

What your background is

• Bachelor's degree in computer science, management information systems, or a relevant field, or equivalent demonstrable experience.
• 3+ years' experience performing IT Audit or security control testing.
• 3+ years' of experience in Information Security or Information Technology.
• Demonstrated experience conducting security control testing and evaluations within an internal audit framework.
• Knowledge of internal audit methodologies, including risk assessment, execution, and reporting.
• Proficiency in industry standards and frameworks (e.g., NIST 800-53, ISO 27001/27002).
• Familiarity with privacy regulations (e.g., GDPR, CCPA) and breach notification laws.
• Experience with sector-specific frameworks (e.g., HIPAA, PCI).

Technical Skills

• Proficiency with security tools (SailPoint, Rapid7, Wiz.io, MS Defender, SIEM, vulnerability management, penetration testing).
• Knowledge of cloud technologies (AWS, Azure).
• Experience using generative AI (e.g., ChatGPT).
• Skills in automation and analytics tools (Excel, Tableau, Alteryx, or PowerBI).
• Create queries and reports in RSA Archer and ServiceNow.
• Familiarity with Kanban boards and Jira.

What is the last date for applying to the job?

Which countries are accepted for this remote job?