Description review
Information Security Risk Manager
TheHiveCareers · Trinidad and Tobago · back to the listing
HR standards
60/100
needs work
Title ↔ description
82/100
solid
Reads as
Security Engineer
93% confident
What this role officially is
ICT security administrator — ESCO, the EU occupation classification
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
Also known as: network security administrator, system security administrator, ICT security administrators, IT security administrator
How others title the same work
Large employers
- Security Risk Management Specialist Canonical Ltd.
- Security Software Engineer Canonical Ltd.
- Senior Security Operations Engineer Canonical Ltd.
- Staff Security Operations Engineer Canonical Ltd.
- Ubuntu Security Engineer Canonical Ltd.
Startups
- Security Engineer (Bangalore, India) AiPrise
- Security & Trust Engineer Alex
- Elucid | Senior Security Engineer | Boston, MA | ONSITE (hybrid) | $130k–$170k Elucid
- Factory | Security Engineer | ONSITE, San Francisco, CA | Full-Time Factory
- Factory | Security Engineer | Onsite in San Francisco | Full-time Factory
What the listing never says
- No pay range published. Candidates cannot tell whether applying is worth their time. Pay transparency
The listing, marked up
Nothing in the wording of this listing tripped a check. The scores above still judge how complete and coherent it is.
JobTitle: Information Security Risk Manager (Risk Advisor)
Job Type: Full-Time/Contract - 2 years (renewable)
Location: Trinidad and Tobago/Fully Remote
RoleSummary:
Provide Information Security & Technology Risk Management consulting services to Project teams based on Risk Management processes and procedures. Participate in Project meetings, Security Reviews, Walkthroughs, and Risk Assessments.
Key Responsibilities:
• Review and interpret requirements documentation, architecture diagrams and solution designs to help determine the feasibility of a project and its security risk. Assess business needs against potential risks and provide your recommendations to enhance our information security landscape
• Assess applications, infrastructure, business units, business processes and external suppliers for information security risks, identifying the potential threats and exposures
• Examine and interpret requirements documents, architecture diagrams, solution designs and other written and verbal information to determine if a project, application, infrastructure or external supplier presents security risk to premium bank.
• Work with third party teams and internal development groups to interpret and review results from penetration tests on internet-facing applications as needed.
• Work with the required teams to ensure that code scans are completed for all new or modified code deployments
• Track to completion, issues raised during the risk management reviews (TRA / ISA / PEN test / CIRA, Code scans/PIRT). Ensure as necessary the logging of identified issues as deficiencies, if mitigation will not be possible prior to project implementation and the associated risk is within the Banks risk appetite.
• Collaboration with relevant teams will be required.
• Provide Information Security risk consulting services to projects; to ensure all information security policies, standards and processes are embedded in the designed and delivered solutions.
• Any other related requests from Senior Management
• In consultation with the senior manager, develops a risk-based schedule for business as usual (BAU) baseline risk assessments; collaborating with respective technology and business owners to mitigate any significant issues identified.
• As requested by senior manager, reviews all contract and third-party arrangements to ensure that information security policies are adhered to, and that sufficient security protection will be afforded to information assets.
Originally posted on Himalayas
Job Type: Full-Time/Contract - 2 years (renewable)
Location: Trinidad and Tobago/Fully Remote
RoleSummary:
Provide Information Security & Technology Risk Management consulting services to Project teams based on Risk Management processes and procedures. Participate in Project meetings, Security Reviews, Walkthroughs, and Risk Assessments.
Key Responsibilities:
• Review and interpret requirements documentation, architecture diagrams and solution designs to help determine the feasibility of a project and its security risk. Assess business needs against potential risks and provide your recommendations to enhance our information security landscape
• Assess applications, infrastructure, business units, business processes and external suppliers for information security risks, identifying the potential threats and exposures
• Examine and interpret requirements documents, architecture diagrams, solution designs and other written and verbal information to determine if a project, application, infrastructure or external supplier presents security risk to premium bank.
• Work with third party teams and internal development groups to interpret and review results from penetration tests on internet-facing applications as needed.
• Work with the required teams to ensure that code scans are completed for all new or modified code deployments
• Track to completion, issues raised during the risk management reviews (TRA / ISA / PEN test / CIRA, Code scans/PIRT). Ensure as necessary the logging of identified issues as deficiencies, if mitigation will not be possible prior to project implementation and the associated risk is within the Banks risk appetite.
• Collaboration with relevant teams will be required.
• Provide Information Security risk consulting services to projects; to ensure all information security policies, standards and processes are embedded in the designed and delivered solutions.
• Any other related requests from Senior Management
• In consultation with the senior manager, develops a risk-based schedule for business as usual (BAU) baseline risk assessments; collaborating with respective technology and business owners to mitigate any significant issues identified.
• As requested by senior manager, reviews all contract and third-party arrangements to ensure that information security policies are adhered to, and that sufficient security protection will be afforded to information assets.
Originally posted on Himalayas