Risk Engineer

A company is looking for a Risk Engineer to join their Security Assurance team. Key Responsibilities Lead and own audit readiness for NIST CSF, AICPA SOC II Type 2, and PCI-DSS Own a cyber risk assessment and drive maturity in the third-party risk management program Support compliance teams by addressing security and compliance inquiries Required Qualifications 3+ years of experience defining, measuring, and maturing a compliance program (5+ years preferred) Bachelor's degree or equivalent industry experience Experience operationalizing risk assessment frameworks and implementing risk management programs Demonstrated experience with at least three security control frameworks (e.g., PCI-DSS, SOC II Type 2, NIST) Understanding of key cloud-based security platforms and security processes