Cybersecurity Control Testing & CRI Maturity Assessor - AVP

About the role

This role is a member of the CISO of America’s team within the Cybersecurity GRC function and is responsible for executing independent control testing, control assessments, and validation activities across both on-premises and cloud environments.

What you'll do

• Control Testing & Validation (On-Prem & Cloud): Test control design and operating effectiveness using evidence-based procedures (e.g., walkthroughs, inquiry, inspection
• CRI Profile Maturity Assessments: Perform CRI Profile maturity assessments by mapping controls to CRI requirements, evaluating evidence, determining maturity ratings
• Third-Party/Vendor Control Assessments: Conduct third-party/vendor cybersecurity assessments with a focus on validating control design and operating effectiveness…
• Assessment Documentation & Reporting: Produce high-quality assessment workpapers, test scripts, and written results that clearly describe scope, procedures performed
• Communicate results through formal reporting, including risk ratings, control gaps, and required remediation actions

What you need

• 3–5 yrs of experience
• Vulnerability assessment
• Risk management
• Data privacy
• CI/CD
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CISSP
• CISM
• CISA
• Cloud security