Information Security Advisor - NIST, Cloud Security

Information Security Advisor - NIST, Cloud Security

Location: Dallas, TX

Onsite Flexibility: Remote

Contract Details

• Position Type: Contract
• Contract Duration: 7 months (with possibility of extension)
• Pay Rate: $60.00–$64.00 / Hour (USD)
• Shift / Schedule: 8:30 AM – 5:30 PM, Monday–Friday; standard 40 hrs/week (possible OT)
• Work Authorization: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Job Summary

This is asecurity advisory team that provides various security services across the enterprise, including assessing systems and their security posture, aligning technology into the network environment, supporting secure by design initiatives, and providing guidance to business lines on best practices and adhering to the bank's security standards. The successful candidate must have an understanding of regional and US regulatory requirements.

The successful candidate will have the opportunity to work for a global legacy Canadian bank with a strong multi-regional US presence that is undergoing significant transformations, including Cloud.

Reporting to the Senior Manager of Security Advisory (US Advisory), theInformation Security Advisor provides guidance to business lines to ensure design, development and implementation of complex projects and initiatives are in accordance with the Bank's Information Security Standards and in compliance with industry regulations. In this role, you will be supporting various business lines while assisting them in making informed decisions to protect information assets deployed in various environments.

Key Responsibilities

• Provide strategic guidance and technical expertise to business lines, IT support functions, and IS&C Control functions to include security within early stages of the design of Bank's technological solutions.
• Providing the following functions to the bank's initiatives:
• Conducting Threat Risk Assessments and performing security advisory work on specific applications and infrastructure associated with the bank's US subsidiaries and other initiatives ensuring that controls are adequate, meet Bank standards, and enable business objectives.
• Conducting Risk Management activities.
• Provide Quality Assurance on Threat Risk Assessments and Threat Modelling as required for Cloud initiatives. Provide design and technical expertise on security solutions and recommend best practices.
• Collaborate with cross-functional teams to design and implement robust security architectures for various systems, applications, and networks.
• Evaluate existing security solutions and propose enhancements or new designs to address emerging threats and business requirements.
• Ensure alignment with industry best practices, compliance standards, and organizational security policies.
• Identify security weaknesses, vulnerabilities, and gaps in existing systems and recommend remediation strategies.
• Provide support on how to apply the Bank's portfolio of standards to the technology footprint of the bank's subsidiaries.
• Provide oversight over the specific line of business security posture, ensuring that all tools available to detect and remediate security risks have been applied.
• Conduct industry reviews and benchmarking exercises to ensure controls are aligned with peers, emerging threats, and available mitigation strategies.
• Working directly with technical leads from assigned Lines of Businesses supporting their initiatives from an Information Security perspective.
• Providing relationship management function primarily to US subsidiaries from an Information Security perspective.

Required Skills

• Strong understanding of US regulatory regulations and practices.
• You are a strong communicator and capable of creating clear documentation and communicating ideas to others.
• You possess advanced communication (verbal/written/presentation) skills in English.

Preferred Skills

• Prior experience using the ServiceNow platform.
• Basic knowledge of cloud technologies and cloud security (GCP, Azure, or AWS).
• Security engineering, security architecture, and/or security risk-based certifications (CISSP, CISM, CCSP, CRISC).
• Familiar with industry standards and frameworks, e.g., NIST 800-53, ISO 27001, ISO 27002, ISO 27017, ISO 27018, PCI DSS, CIS.

Education Requirements

• Post-secondary education in Computer Science or in a related field.

Required Experience

• 5 years of hands-on technical working experience in performing security assessments on various platforms, network infrastructure, and complex applications.
• 3 years of experience with Threat Risk Assessments and Threat Modelling for applications hosted on premise, cloud, hybrid cloud, and SaaS.
• 2 years of experience in security solution architecture, software development, and/or hands-on experience with implementations to various environments, knowledge of application security controls, including compensating controls and cloud-based security solutions.
• 3 years of experience reviewing and interpreting vulnerability reporting, server hardening requirements, and validating presence of controls through evidence.

Benefits

• Medical, Vision, and Dental Insurance Plans
• 401k Retirement Fund

Important Notes

• Interview process: 2 rounds. Round 1 – Hiring Manager and panel (Senior Leads) – 45 minutes via MS Teams Video.

About GTT

GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. We highly value diverse and inclusive workplaces and support Fortune 500 organizations across banking, financial services, technology, life sciences, biotech, utilities, and retail sectors throughout the U.S. and Canada.

Job Number: 26-17104Industry: Software Engineering

#LI-Remote #LI-GTT