Job Description
Providestechnical guidance on information security policies, procedures, technologies, and compliance-related activities through execution of First Line Assurance assessments. Works with stakeholders across Information Security and Technology organizations tovalidatesecurity control implementation and effectiveness,identifyvulnerabilities and control gaps, support remediation activities, and contribute to certification, continuous monitoring, and automation programs.
Automation emphasis:This First Line Assurance role supports an automation-first model for control audits, evidence collection, reporting, certification, and continuous monitoring. Experience with Power Automate, Power BI, dashboards, and workflow automation is highly desirable.
Collaborates with Information Security, Technology, Risk, Audit, and business stakeholders to support First Line Assuranceobjectives. Aligns assessment activities with business priorities and communicates findings in a clear, actionable manner.
Performs targeted control assessments, operational assurance reviews, post-deployment security validations, and certification activities. Evaluates security control implementation and effectiveness,identifiescontrol weaknesses and compliance gaps,assistswith remediation tracking, and provides detailed findings and recommendations to stakeholders.
Supports the automation of control audits, evidence collection, control testing, reporting, remediation tracking, certification, and continuous monitoring. Contributes to workflows, dashboards, data collection, and repeatable assessment processes that reduce manual effort and increase assurance coverage.
Usesautomation and reporting tools to streamline evidence collection, control validation, assessment execution, remediation tracking, and recurring assurance activities. ExperiencewithPower Automate, Power BI, or similar workflow and reporting technologies is desirable.
Supports continuous monitoring, assurance, and validation activities by reviewing technical, administrative, and operational security controls. Analyzes assessment results,assistsin development of automation opportunities, tracks remediation efforts, and contributes to recurring certification and reporting activities.
What Are We LookingForin This Role?
Bachelor'sand/orMaster’sDegree in Computer Science, Information Security,or related information technology field,and/ora combination ofequivalentandrelevantwork experience.
Minimum7+yearsrelevant experience in information security, security assurance, audit, risk, compliance, security architecture, security engineering, or related technology functions.
Knowledge of industry standard securityandcompliance programsand frameworksincluding PCI, FFIEC,FISMA,SOX, GLBA, HIPAA, ISO-87001, NIST 800-53, NST CSF, NIST RMF,and/orrelated security control frameworks.
Ability to work with stakeholders at multiple levels toidentifyrisk, collect and evaluate evidence, document findings, and communicate practical remediation options.
Required Certification(s) / Licensing
Professional certifications such asCRISC,CGRC,CISM,CISSP, CISA,CySA+, or equivalent experience are preferred.
Desired Skills and Capabilities
Strong familiarity with on-prem, cloud, and hybrid environments, across connected and disconnected environments, in a complex and diverse Fortune500.
Familiarity with multiple cloud hosting environments is preferred,or at least strong familiarity in one of the three main cloud provider environments such asGCP, AWS, or Azure.
Experience performinginformationsecurityassessments, securitycontrol assessments, technical control testing,control design testing, control effectiveness testing, KPI/KRI testing & validation,operational assurance reviews, or post-deployment validation activities.
Experiencedesigning,implementing,or supporting automated security control validationprocesses, tooling, and infrastructure, to include strategic and continuousmonitoring, auditresiliency,and/or evidence collection processes is highly desirable.
Experience developing dashboards, metrics, assessment reports, or recurring assurance reporting from multiple data sources.
Knowledge of continuous monitoring, control validation, compliance automation, evidence collection, and remediation tracking concepts.
Strong analytical, communication, and stakeholder management skills, with the ability to translate technical evidence into business-focused recommendations.
Having broad yet in-depthexpertiseand unique knowledge, uses skills to set and ensure success of companyobjectivesand principles and to achieve goals in creative and effective ways within environments and situations that are complex and difficult. Having ownership of a function, major account, or matrix management responsibilities, uses knowledge to ensure success, strengthen relationships, expand the business through key initiatives, and lead matrix teams on complex projects.
Works on issues that impact security assurance, technology risk management, control effectiveness, automation, reporting, and future concepts, products, or technologies. Creates formal networks with key decision makers and serves as a trusted partner to Information Security, Technology, Risk, Audit, and business stakeholders.
Exercises wide latitude in determiningobjectivesand approaches to critical assignments.
EEOC Statement
Global Payments is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here.
If you are made a conditional offer of employment and will be working in the United States, you will be required to undergo a drug test. In developing this job description care was taken to include all competencies and requirements needed to successfully perform the position. Reasonable accommodations will be provided for individuals with qualified disabilities both during the hiring process, as well as to allow the individual to perform the essential functions of the job, if hired.
Washington Candidates: Click here for information on the Fair Chance Act.
