Senior Information Security Specialist

Job Summary

Supporting the advancement of cybersecurity and GRC programs, the full-time remote Senior Information Security Specialist will coordinate third-party risk management, assist with compliance initiatives, and enhance internal security processes.

Key responsibilities

• Perform and maintain third-party risk assessments and track vendor remediation activities
• Support coordination and analysis of internal and external security testing, including vulnerability scans and penetration tests
• Develop, track, and follow up on corrective action plans for identified security gaps or audit findings

Required qualifications

• 5+ years of experience in information security, GRC, or IT risk management
• Strong understanding of cybersecurity concepts, controls, and risk frameworks
• Demonstrated experience with third-party risk management processes and tooling
• Proven ability to coordinate security testing and vulnerability management efforts
• Experience with regulatory compliance and audit support in fast-paced environments