Execute and review regular OS patching, vulnerability assessments, and system configurations to ensure compliance with IT security standards.
Manage enterprise access controls, privileged accounts, password policies, and maintain accurate server and asset inventories for audit readiness.
Oversee SSL/TLS certificate lifecycles, track End-of-Life and End-of-Support systems, and provide evidence for system lifecycle compliance.
Conduct periodic IT control and risk assessments, perform User Access Reviews, and validate segregation-of-duties compliance.
Monitor security logs for anomalies and potential policy violations.
Prepare audit-ready reports for management and regulatory reviews, and support auditors with evidence and explanations of IT controls.
Track remediation of security findings, ensure timely closure of audit and risk issues, and maintain comprehensive records of compliance checks and risk mitigation activities.
Requirements
Bachelor's degree in IT, Computer Science, or a related field.
5+ years of experience in IT security operations, IT auditing, or IT compliance.
