Senior Information Security Specialist

Job Summary

To support the advancement of cybersecurity and GRC programs, the remote Senior Information Security Specialist will manage third-party risk assessments, coordinate security testing, and develop internal security policies while enhancing the enterprise-wide security posture.

Key responsibilities

• Perform and maintain third-party risk assessments and track vendor remediation activities
• Support coordination and analysis of internal and external security testing, including vulnerability scans and penetration tests
• Develop, track, and follow up on corrective action plans for identified security gaps or audit findings

Required qualifications

• 5+ years of experience in information security, GRC, or IT risk management
• Strong understanding of cybersecurity concepts, controls, and risk frameworks
• Demonstrated experience with third-party risk management processes and tooling
• Proven ability to coordinate security testing and vulnerability management efforts
• Experience with regulatory compliance and audit support in fast-paced environments