Security Assurance Specialist

Summary

Execute security assurance activities including logical and physical access control compliance reviews across regions, and conduct third-party security assessments for suppliers and vendors. Day-to-day work involves reviewing security questionnaires, certifications, and audit reports, and tracking remediation to ensure compliance with organizational security policies.

The Security Assurance Analyst is responsible for executing security assurance activities related to access control compliance and third-party security assessments. The role collaborates with internal teams and business stakeholders to ensure compliance with organizational security policies and applicable standards.

Key Responsibilities

  • Access Control Compliance
  • Collaborate with the Head of Security Assurance to plan periodic physical and logical access control compliance reviews across all regions.
  • Work with IT, HR, and business teams to conduct logical access reviews and validate compliance with organizational policies.
  • Coordinate with regional physical security and facilities teams to execute physical access control reviews as per the defined review frequency.
  • Document findings, track remediation actions, and report compliance status to the Head of Security Assurance.
  • Supplier & Vendor Security Assessments
  • Conduct security assessments for new and existing suppliers, vendors, and third-party service providers.
  • Review security questionnaires, certifications, audit reports, and supporting evidence.
  • Assess vendor security controls against organizational requirements and identify potential risks.
  • Document assessment findings, recommend remediation actions, and track risk mitigation with relevant stakeholders.
  • Support periodic reassessments of critical vendors as part of the third-party risk management program.
  • Other activities
  • Coordinate with IT, HR, Procurement, Facilities, and business teams to ensure timely completion of security assurance activities.
  • Support internal and external audits by coordinating evidence collection, tracking remediation actions, and maintaining compliance documentation.
  • Support the Security Unit function in executing security assurance initiatives and other security related activities as assigned by the CISO Security Assurance manager.

See also

要針對這個職缺調整履歷嗎?

目前無法檢查您與這個職缺的符合程度;請先將履歷加入個人檔案,下次即可查看。

A new version of freehire is available