Description
Demonstrate experience in information assurance and/or information security at a governance and technical level
In depth understanding of IT risk and security principles across all elements of IT
Able to work with business and asset owners to identify security requirements in line with applicable standards and regulation
Ability to write/review Security policies, documentation, controls and procedures
Solid understanding of Risk Management and Security Frameworks
Broad technical background, network and/or systems security engineering
Familiar with technical security concepts including vulnerability management, penetration testing, security event monitoring
Familiar with both commercial and open source offensive/defensive security solutions.
Ability to critically review materials submitted and assess the adequacy of evidence provided
CISSP, CISM, CISO or equivalent certifications
Ability to develop strong relationships with business colleagues and global teams