Security Assurance Analyst

As a Security Assurance Analyst, my responsibilities will include: - Working closely with delivery and operational teams to provide end-to-end engagement across a range of IT-focused projects and products. - Assuring required levels of due diligence, risk assessments, and security design across a portfolio of projects. - Defining security non-functional requirements for new products and services. - Reviewing and providing input on various design documents (HLD, LLD, data flow diagrams, etc.) to ensure that Security non-functional requirements are delivered and implemented prior to product or service launch. - Acting as a technical security Subject Matter Expert (SME) by representing the Information Security team in various project meetings or workshops. - Providing project consultation on various compliance frameworks that currently apply to our business, including NIST, PCI, SOX, and GDPR. - Coordinating between projects, Security Operations, and third-party vendors to ensure that security testing activities are performed and delivered as per the pre-agreed scope. - Ensuring that any vulnerabilities identified are processed in accordance with the Information Security Risk Management process. - Identifying and tracking risk issues across projects and ensuring adherence to the risk management lifecycle. - Advising on the change management process for new products or services and providing input to the Change Approval Board when necessary. - Offering support to security incident management and compliance services when required. - Collaborating with key stakeholders across security and the business to provide risk analysis of vulnerabilities, identify appropriate security controls, and review and approve remediation activities. - Supporting the broader Information Security and Risk team in evolving and embedding key governance artifacts and processes, such as effective risk management and the development of policies and procedures. - Communicating and educating technical and non-technical colleagues about security risks.