Security Technologist II, Technical Risk & Assurance

What you'll do

• Test the design and operating effectiveness of security controls across IT, cloud, SaaS, and third-party environments.
• Build and maintain automated control tests and continuous monitoring systems to test full populations rather than samples.
• Write scripts and queries to collect and validate audit evidence while reducing manual effort for stakeholders.
• Conduct risk assessments for systems and vendors to identify threats to confidentiality, integrity, and availability.
• Maintain the risk register and issue records, ensuring each risk has a current rating, owner, and status.
• Track corrective actions and Plans of Action and Milestones (POA&Ms) until all issues are closed.
• Implement AI and LLM-based solutions to classify security findings and summarize audit trails.
• Build dashboards and reports on control test results, issue aging, and exception trends.

What we're looking for

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• 3+ years of experience in IT audit, security assurance, risk assessment, security issue management, or a related technical role.
• Experience assessing control design and operating effectiveness across enterprise IT and cloud environments.
• Technical fluency in identity and access management, cloud infrastructure (AWS, GCP, or OCI), logging, vulnerability management, or change management.
• Hands-on automation experience including scripting in Python or similar languages and querying data with SQL.
• Experience with audit remediation tracking, risk registers, or corrective action management.
• Knowledge of control frameworks and standards such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, CIS, and PCI DSS.
• Certifications such as CISA, CISSP, CRISC, Security+, or a cloud security certification (preferred).