Information Security Specialist

We are seeking a highly skilled and analytical professional to join the Continuous Controls Monitoring (CCM) program as part of the Metric Design & Architecture team. This role is pivotal in defining and documenting metrics that measure the effectiveness and correctness of Technology control implementations across the firm. The successful candidate will engage with multiple stakeholders to ensure real-time monitoring of control posture and alignment with regulatory and policy requirements.

Job Responsibilities:

• Establish and document metric definitions for Technology controls by collaborating with stakeholders, analyzing processes, and evaluating data sources.
• Engage with the Technology Policy team to ensure metrics are aligned with policy design and updates.
• Collaborate with metric consumers to define and implement a reporting framework that meets business and compliance needs.
• Work in close partnership with the CCM Data Acquisition and Tooling team to operationalize metrics through appropriate data pipelines and visualization tools.

Required Skills & Qualifications:

• 5+ years of experience in Information Security and/or Information Technology
• Minimum 2 years of hands-on experience with Technology or Cybersecurity control implementations
• Proven ability to define metrics and Key Control Indicators (KCIs) to track and demonstrate control implementation completeness
• Strong analytical and problem-solving skills, with experience in both qualitative and quantitative analysis
• Excellent business acumen and the ability to manage stakeholder expectations effectively
• Strong interpersonal skills to collaborate with cross-functional teams, including policy owners, engineers, and product managers
• Ability to work under pressure in a fast-paced, deadline-driven environment

Preferred Skills:

• Familiarity with cybersecurity domains such as Identity & Authentication, Data Security, System Security, Network Security, and Application Security
• Understanding of Public Cloud technologies (AWS, Azure, GCP)
• Knowledge of logging, monitoring, and incident response practices
• Experience translating policies into actionable technical requirements
• Cybersecurity certifications such as CISSP, CISM, or CISA are a strong plus

#J-18808-Ljbffr