Apply on Employer Site

PTR Global · 5 hours ago

Technology Controls - Intermediate

Norwalk, CT

Contract

Onsite

Mid Level

$60/hr - $65/hr

PTR Global is seeking a GRC Consultant to assist with technology controls and project management. The role involves preparing information security policies, conducting user access reviews, and supporting various assessments related to compliance and governance.

Information Technology & Services

Responsibilities

Prepare Information Security Policies and Standards for annual review or when there are changes required

Assist with the User Access Review and Recertification every 6 months

Interview personnel and create dataflow diagrams for data use cases needed for the annual PCI Assessment

Monitor noncompliant activities and prepare GRC quarterly reports or as required

Support SOC 2 assessment and PCI SAQ by completing assigned tasks

Document GRC Procedures and BAU Activities

Qualification

Technology controlsRiskControl AssessmentsControl RemediationInformation Security FrameworksApplication developmentInfrastructure supportVerbal skillsProficient in WordProficient in ExcelProficient in PowerPointProficient in VisioProject managementWritten skillsProblem-solving skills

Required

Proficient in several Technology controls/resiliency and project management, could also include basic engineering, application development, infrastructure support experience

Knowledgeable in the following: Risk and Control Assessments

Control Remediation

Technology control domains including but not limited to policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management and data protection

Prepare Information Security Policies and Standards for annual review or when there are changes required

Assist with the User Access Review and Recertification every 6 months

Interview personnel and create dataflow diagrams for data use cases needed for the annual PCI Assessment

Monitor noncompliant activities and prepare GRC quarterly reports or as required

Support SOC 2 assessment and PCI SAQ by completing assigned tasks

Document GRC Procedures and BAU Activities

Bachelor's degree or equivalent experience

Familiarity with any Information Security Framework (ISO, PCI, NIST, etc.)

Quality results driven, strong sense of ownership, and detail oriented

Strong written, verbal, and problem-solving skills

Proficient in Word, Excel, PowerPoint, and Visio