Technical Writer - Security Control Playbooks

Outstanding long-term contract opportunity! A well-known Financial Services Company is looking for a Lead Information Security Analyst.

Work with the brightest minds at one of the largest financial institutions in the world. This is long-term contract opportunity that includes a competitive benefit package! Our client has been around for over 150 years and is continuously innovating in today's digital age.

If you want to work for a company that is not only a household name, but also truly cares about satisfying customers' financial needs and helping people succeed financially, apply today.

Contract Duration : 6 Months

Required Skills & Experience

• 5+ years of Information / Cybersecurity experience
• 2+ years of intermediate to advanced experience with public cloud computing / hosting (preferably Microsoft Azure and / or Google)
• Proven experience with technical writing and requirements gathering / documentation.
• Strong experience evaluating processes / procedures and recommending efficiency, quality and security / risk mitigating adjustments / improvements.
• Advanced capabilities with technical writing, process development, process mapping, process flow diagraming and process re-engineering
• Demonstrated deep understanding of cloud technology and cloud security concepts, spanning cloud platforms / landing zone, cloud services, Identity & Access Management, boundary protection / network security, cloud storage and data protection
• Strong understanding of and ability to apply knowledge of industry / government standards and frameworks to real world business and technical requirements (.

NIST, CIS, CSA, FFIEC, ISO)

• Experience with Agile Scrum or Kanban methodologies
• Strong analytical skills, proven critical thinking capabilities and ability to solve complex problems with minimal direct oversight
• Ability to handle multiple, high priority deliverables concurrently
• Ability to communicate confidentially, professionally, and effectively, in both written and verbal formats, with stakeholders and partners
• Must have intermediate to advanced experience working with Microsoft Office products (. Word, Excel, PowerPoint, Visio, Outlook, Teams, SharePoint)

Desired Skills :

• Specific experience conduction Cloud implementation / migration control and or security capability validations
• Cloud auditing experience
• Cloud, Risk and / or Cybersecurity certifications (., CISA, CISM, CISSP, CRISC, CCSK)
• Cloud certifications specific to Azure, Google or AWS
• Understanding of information security threats, trends and industry best practices and security tools
• Finance sector security experience or other regulated industry (., utilities, health care, government)

What You Will Be Doing :

This position will be responsible for cloud control validation and evidence gathering process re-engineering and Playbook documentation.

The position will conduct evidence gathering in support of validation of cloud controls alongside teammates, quickly learning / understand existing processes to then pivot to developing Playbooks that will enhance / uplift existing process to drive greater consistency and uniformity regarding validation and evidence gathering for adherence to cloud control objectives.

These Playbooks will be leveraged as a source of requirements for later process automation, while in the interim bringing greater efficiency and consistency to our current manual validation and evidencing processes.

The individual selected for this role with be required to drive the ideation, design, development and execution / delivery of Playbooks specific to security control validations and adherence evidence gathering / analysis.

Validation Playbooks to cover these use cases : cloud platform, workload and services validations. Our public cloud program is ramping up volumes of deployments for Azure AKS, ASE, SQL MI, while also introducing additional Database / ETL services on Azure and further upscaling of the use of services on GCP for Data Warehouse / Analytics.

Based on all of that, the ideal candidate for this role must have a good understanding of Azure and Google, overall strong cloud technology and security knowledge and understanding, while also having experience with technical writing, process development, process mapping, process flow diagraming and process re-engineering.

Day-to-Day activities of the role include :

• Evaluate cloud app workload, platform and / or service implementations for adherence to the Cloud Control Framework (CCF).
• Gather evidence of control adherence for the platform, application workloads for cloud services.
• Work with development teams, platform architects and process engineers to validate their workloads before and / or after production deployment.
• Drive the development of cloud control validation and adherence evidence gathering Playbooks.
• Collaborate with Teammates and partners to gather and / or confirm details / specifics for inclusion with Playbooks.
• Evaluate in place processes and procedures, recommend consistency, quality and security / risk mitigating adjustments to re-engineer processes and reflect results in Playbooks.
• Ensure Playbooks can be leveraged by engineering and development teams as requirements for the automation of cloud control validation and evidence gathering processes.

You will receive the following benefits :

• Medical Insurance - Four medical plans to choose from for you and your family
• Dental & Orthodontia Benefits
• Vision Benefits
• Health Savings Account (HSA)
• Health and Dependent Care Flexible Spending Accounts
• Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance
• Hospital Indemnity Insurance
• 401(k) including match with pre and post-tax options
• Paid Sick Time Leave
• Legal and Identity Protection Plans
• Pre-tax Commuter Benefit
• 529 College Saver Plan
15 days ago