Responsibilities:

📍Assist in identifying, evaluating, documenting, and communicating security risks across the organization, ensuring continuous monitoring and management of these risks. 📍Collaborate with internal stakeholders to observe and learn about risk remediation strategies and assess any residual risks that may remain. 📍Support the team in conducting annual security risk assessments, aligned with the NIST Cybersecurity Framework (NIST CSF). 📍Participate in supervised Targeted Risk Assessment (TRA) in compliance with PCI DSS and other risk assessment projects. 📍Help conduct comprehensive vendor security risk assessments, and support the team in providing recommendations for contractual security provisions. 📍Participate in supervised external security audits and assist in providing risk related evidence. 📍Contribute ideas and assist in projects to further advance the GRC programs.
📍Support management in identifying potential areas of concern with suggested mitigation strategies. 📍Help review and update security policies and standards, ensuring they remain current and effective in addressing evolving threats and regulatory requirements.

Qualifications:

📍Currently enrolled in a Bachelor’s or Master’s degree program in a relevant field (e.g., Cybersecurity, Information Security, Computer Science, Business, or related discipline). 📍Strong analytical and creative problem solving skills. 📍Strong interpersonal skills to interact with team members, auditors, and stakeholders. 📍Strong organization skills to prioritize work and balance assigned projects. 📍Ability to work independently and as part of a broader team. 📍Understanding of security controls and third party security risk management. 📍Familiarity and understanding with key security best practices concepts and standards preferred (e.g., OWASP top 10, NICS CSF). 📍Knowledge of compliance and security standards such as SOC 2 Type II, ISO 27001, PCI DSS preferred.

If you’re passionate about blockchain and decentralized technologies, explore more opportunities in web3 and cryptocurrency careers.