Lead Information Security Governance & Risk Specialist (Mobile)

The Lead Information Security Governance & Risk Specialist identifies and specializes in analyzing and securing mobile applications and devices against cybersecurity threats. This role will support mobile application governance reviews, by tracking and assessing mobile application requests, evaluating potential security risks, and identifying solutions to mitigate cybersecurity risks. Under supervision of the business information security office (BISO), this role will support the mobile application governance program and help drive improvements to minimize possible mobile application and mobile device risk exposure to the organization. Activities include:

·        Tracking and monitoring mobile application requests and performing triage related activities to ensure requests are managed to completion.

·        Leveraging various tools and techniques to analyze mobile applications and devices for vulnerabilities, weaknesses, and potential security risks.

·        Working with technology, risk and business partners to create remediation action plans to mitigate cybersecurity risks and govern action plans through until completion.

·        Communicating effectively with BISO representatives, Lines of Business, technology areas, risk partners, and application teams to report program status when needed.

·        Develop deep understanding of mobile application and device security risk and provide guidance to internal partners when needed.

·        Develop and maintain documented mobile policies and procedures and oversee related mobile cyber governance.

This role will serve as a mobile security subject matter expert in job area, which is typically obtained through advanced education and work experience.

Other Responsibilities typically include:

·        Staying up to date with mobile security trends and best practices.

·        Partnering with Mobile Governance team leads to ensure coordination of tasks.

·        Developing and implementing mobile security solutions to mitigate risks identified. This may involve working with Cyber Mobile support teams and other IT teams to improve the security of mobile applications and devices.

Experience Range – 6 to 7 years

Requirements

Key skills required for this role are,

• Good understanding of Cyber Security domains such as mobile application security, Encryption etc.
• Experience in analyzing mobile application risks using vulnerability assessment and penetration testing.
• Excellent knowledge of Risk management concepts i.e. Risk Assessment, Inherent risk, risk treatment etc.
• Should understand Security Governance process including creation of policy and procedure.
• Excellent interpersonal skills, as well excellent communication skills, verbal and written.

Last updated on Jan 9, 2024