Team Overview
The Security consultant is responsible for enabling secure business growth by ensuring that security is embedded into technology solutions, cloud platforms, applications, infrastructure, and business initiatives from design through implementation. The team partners closely with Engineering, Product, Infrastructure, Cloud, Risk, Compliance, and Global Information Security teams to promote security-by-design principles and reduce cybersecurity risk across the organization.
This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.
Role Overview And Core Responsibilities
•Coordinate and perform first level security architecture reviews for applications, infrastructure, cloud deployments, and technology initiatives.
•Ensure security review activities are completed within established timelines.
•Track security findings, risks, exceptions, and remediation activities resulting from architecture reviews, Penetration testing, Vulnerability management.
•Facilitate the documentation and approval process for security exceptions and risk acceptances.
•Serve as the primary coordination point between Global Security Architecture team and business, technology, and project teams.
•Communicate security requirements, recommendations, and status updates to relevant stakeholders.
•Prepare management reports, metrics, dashboards, and status updates InfoSec activities.
•Perform cloud security, application security, and infrastructure security review activities.
•Support compliance initiatives involving ISO 27001, SOC 2, privacy, regulatory, and customer security requirements.
Required Knowledge And Experiences
•Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
•Relevant security certifications (Security+, ISO 27001, CISSP Associate, or equivalent) are desirable.
•5-8 years of experience in Network Security, Cloud Security, IT Compliance, or Technology Project Coordination.
•Understanding of Security Architecture and Secure-by-Design principles.
•Knowledge of cybersecurity fundamentals, including identity and access management, network security, data protection, vulnerability management, and application security.
•Familiarity with cloud security concepts across AWS, or GCP environments.
•Experience working with cross-functional teams including Security, Engineering, Product, Infrastructure, Cloud, and Business stakeholders.
•Experience supporting audits, regulatory reviews, and security compliance initiatives.
