*Hi Partners,*


*Greetings,*



*Hope you are doing Well!!!!!!!!!!!!!!!*



*Please forward a profiles to **[email protected]*
<[email protected]>



*Here are the requirement details*
-- 






* 14mo Contract Golden Valley, MN*
------------------------------

Remediation Analyst - Vendor Information Security Risk Assessment (VISRA)
supporting accelerated approach for remediating risks identified as a
result of Onsite Risk Assessments for high risk critical vendors

Reporting to the VISRA Team, the individual will act as a liaison & SME for
internal departments & vendors to successfully track remediation of the
identified findings. We leverage HITRUST CSF Version 7.0 for our program.

*Top Responsibilities:*

Track remediation of the identified findings as per program requirements
and industry standard best practices
Ensure vendor compliance to the business agreement, policies, procedures, &
regulations along with ability to map controls and compliance requirements
Review vendor supplied policies & procedures, internal/external assessment
reports, agreements and provide feedback
Update findings and remediation status in eGRC Archer tool and share risk
metrics with executives
Communicate, escalate, and track vendor progress on remediation
Act as a liaison & SME for internal departments & vendors to successfully
manage remediation
Understand information security risks that are inherent to a business and
articulate those risks in business terms
Maintain current knowledge on information security topics and their
applicability program requirements
Engage Vendor Relationship Officer / Vendor Management Office regarding any
delays/deviations during remediation

*Tools Needed:*

Advance level experience in MS Word, MS Excel, and MS PowerPoint etc.

*Must Have:*

Experience working with senior levels of management
Good follow-up skills and detail oriented
Security expertise including knowledge on different security risk
assessment frameworks (NIST/Octave), standards
(ISO27001/HITRUST/ITIL/Cobit), and act such as (HIPAA/GLBA).
Experience in examining the SSAE 16 Audit report
Knowledge and understanding of different security products (web/email
filtering, disk encryption, IDS/IPS, antivirus, DLP, firewall etc.)
Knowledge of software development methodologies, application security, and
OWASP Top 10 guidelines
Ability to manage remediation independently with minimal supervision
Strong Communication and Presentation Skills

*Nice To Have:*

Possess good project management skills





Looking forward to hearing from you at the earliest!!!



*Regards*



*Shankar*

Professional Recruiter

33505 State Street, Suite # 200 Farmington, MI 48335

*V* (248)-522-6879

*F* (248)-579-4454

*Linkedin: **www.linkedin.com/in/shkrajan*
<http://www.linkedin.com/in/shkrajan>

*Email** : **[email protected]* <[email protected]>

*Messanger**: [email protected] <[email protected]>*

*Minority Certified and Woman Owned Enterprise*

*TCI**- Technology Consultants inc*

*Note:* *It is not a solicitation attempt!!!*

-- 
You received this message because you are subscribed to the Google Groups "SAP 
ABAP" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/sap-abap.
For more options, visit https://groups.google.com/d/optout.

Reply via email to