Risk Management Professional

Client is seeking an IT M&A Security Assessor that: • Can lead a risk assessment and/or audit of IT controls and systems. The scope could include client/endpoints, servers, access management controls, networks, telecommunications systems, and various cloud environments / applications. The assessor’s role is to conduct audit review procedures and evaluate the company''s technological infrastructure against HITRUST, NIST, PCI and other internal security control frameworks, as needed. • Review business processes, identify and assess controls, and communicate results with the team • Can help identify and prioritize risks to the environment, document the risks and recommendations to address the risks and work with the target entity to help them understand the risks. • Makes decisions on moderately-complex to complex issues regarding technical approaches for project components, and work is performed without direction. Exercises considerable latitude in determining objectives and approaches to assignments. • Communicates well verbally and in writing to various types of audiences (e.g., technical SME and business leadership).