[Hiring] Senior Control Assurance Assessor @Experian
Mar 16, 2025 - Experian is hiring a remote Senior Control Assurance Assessor. 💸 Salary: unspecified. 📍Location: Costa Rica.
Role Description
As a Senior Control Assurance Assessor, you'll test security controls both on-premise and in the cloud to ensure design implementation, safeguarding Experian's assets. You'll assess control design, performance, and compliance with standards and regulations, reporting to the Information Security Control Assurance Testing Manager. Identifying gaps, documenting findings, and recommending improvements to mitigate risks are important responsibilities. Using data-driven testing techniques and a defined methodology, you'll collaborate to ensure controls meet current risks and regulatory requirements.
- Conduct security control assessments, using documented control activities (where they exist) and regulatory requirements.
- Develop test plans, test cases, and procedures, applying data from security tools to capture evidence.
- Use queries and dashboards to identify potential control failures as part of the control testing process.
- Ensure the accuracy and timely completion of control testing, providing peer review.
- Document findings, including root cause analysis and applicable recommendations for remediation.
- Be the primary liaison with partners, delivering clear progress updates and results.
- Contribute lessons learned by integrating partner feedback to improve the control testing program.
Qualifications
- A bachelor's degree in computer science, management information systems, or a relevant field, or equivalent demonstrable experience.
- 5+ years' of experience in Information Security or Information Technology.
- 3+ years' experience performing IT Audit or security control testing.
- Knowledge of internal audit methodologies, including risk assessment, execution, and reporting.
- Proficiency in industry standards and frameworks (e.g., NIST 800-53, ISO 27001/27002).
- Familiarity with privacy regulations (e.g., GDPR, CCPA) and breach notification laws.
- Experience with sector-specific frameworks (e.g., HIPAA, PCI).
Requirements
- Proficiency with security tools (SailPoint, Rapid7, Wiz.io, MS Defender, SIEM, vulnerability management, penetration testing).
- Knowledge of cloud technologies (AWS, Azure).
- Experience using generative AI (e.g., ChatGPT) for test strategies, reports, and communications.
- Skills in automation and analytics tools (Excel, Tableau, Alteryx, or PowerBI).
- Create queries and reports in RSA Archer and ServiceNow.
- Familiarity with Kanban boards and Jira.
Benefits
- Medical, life and dental insurance
- Asociacion Solidarista
- International Share Save Plan
- Flex Work/Work from home
- Paid time off
- Annual Performance Bonus
- Education Reimbursement
- Family Bonding
- Bereavement Leave
- Referral Program
- and more.
Similar Remote Jobs
More jobs at Experian
-
QA great compensation package and bonus plan USAMar 17, 2025
-
Product great compensation package and bonus plan USAMar 17, 2025
-
Data Analysis unspecified Costa RicaMar 16, 2025
More QA jobs
-
QA $127,000 – $180,000/year, plus commissions or discretionary bonus USAMar 17, 2025
More jobs in Costa Rica
-
Sales / Business earn big on commission! Northern America, Americas, Latin America (LATAM) +77 moreMar 17, 2025 -
Sales / Business unspecified USA, UK, Germany +15 moreMar 17, 2025
-
Data Analysis unspecified Costa RicaMar 17, 2025
Kickstart Your Job Search
Unlock 52,694 additional remote jobs, advanced search & email notifications
Too many emails? Declutter your inbox with Meco
Your home for reading newsletters
| 📍 | Be aware of the location restriction for this remote position: Costa Rica |
| ‼ | Beware of scams! When applying for jobs, you should NEVER have to pay anything. Learn more. |
|
Salary
💸
unspecified
|
Remote
Location
Costa Rica
|
|
Job Type
full-time
|
Posted
Mar 16, 2025
|
| 📍 | Be aware of the location restriction for this remote position: Costa Rica |
| ‼ | Beware of scams! When applying for jobs, you should NEVER have to pay anything. Learn more. |
