Senior IT Governance Specialist
Role description
We are looking for an experienced Senior IT Governance Specialist to drive and strengthen global security and compliance initiatives, with a particular focus on the US market. In this role, you will report to the IT Director for the business unit and collaborate closely with the CISO responsible for overall security governance. You will work across multiple business units in an international environment, ens... Visa mer
Senior IT Governance Specialist
Role description
We are looking for an experienced Senior IT Governance Specialist to drive and strengthen global security and compliance initiatives, with a particular focus on the US market. In this role, you will report to the IT Director for the business unit and collaborate closely with the CISO responsible for overall security governance. You will work across multiple business units in an international environment, ensuring that security frameworks, processes and controls are consistently implemented and followed.
The role requires a strong blend of technical security expertise, regulatory understanding and stakeholder management, and suits someone who is comfortable acting as a central point of contact for security and compliance matters.
Responsibilities
Lead and coordinate IT security governance and compliance activities with focus on the US market.
Ensure alignment with relevant security and privacy frameworks such as GDPR, ISO 27001, SOC 2, CCPA and HIPAA.
Work closely with IT, security and business stakeholders to define, implement and maintain security policies, standards and guidelines.
Use security tools such as Microsoft Defender, Intune and M365 Security Center to monitor and improve the security posture (Sentinel/SIEM experience is a plus).
Plan, conduct and support audits and risk assessments, including internal and external audits, customer assessments and remediation planning.
Contribute to network and endpoint security controls, including firewalls, patch management and vulnerability scanning.
Drive Identity & Access Management (IAM) best practices, including work with Active Directory, Azure AD, MFA, RBAC and access reviews.
Participate in and sometimes lead incident response activities, including investigation, containment, documentation and follow-up.
Support and develop security awareness initiatives such as phishing simulations, policy training and global user education.
Act as a security liaison across IT, DevOps, HR, Finance and leadership, providing clear and actionable guidance.
Work independently in a global setup and fully align to US Eastern Time (EST / GMT-5) working hours.
Requirements
Strong background in IT security governance and compliance.
Experience working with frameworks and regulations such as GDPR, ISO 27001, SOC 2, CCPA, HIPAA or similar.
Practical experience with security tools such as Microsoft Defender, Intune and M365 Security Center (experience with Sentinel/SIEM is an advantage).
Proven experience in conducting audits and risk assessments, including customer security assessments and remediation planning.
Solid understanding of network and endpoint security, including firewalls, patch management and vulnerability scanning.
Strong skills in Identity & Access Management (IAM), including Active Directory, Azure AD, MFA, RBAC and access review processes.
Hands-on experience with incident response, investigation, containment and structured documentation.
Experience in running or supporting security awareness initiatives (e.g. phishing simulations, policy and process training).
Excellent communication skills, with the ability to explain complex security topics to both technical and non-technical stakeholders.
Ability to work independently in a global environment and fully adapt to EST (Ohio) working hours.
Fluency in English, spoken and written.
Meriting
Security certifications such as CISSP, CISM or ISO 27001 Lead Auditor.
Experience with DevSecOps practices and secure SDLC.
Experience working in international organisations and matrix environments.
Experience collaborating closely with product, DevOps and cloud/platform teams.
Start / Duration
Start: ASAP (by agreement)
Duration: 6 months
Location
Location: Remote, with some on-site presence in Stockholm/Sandviken (by agreement)
About Rasulson Consulting
Rasulson Consulting is a specialized staffing and recruitment firm within the IT sector. We partner with established technology companies as well as innovative startups to offer attractive career opportunities for professionals looking to grow within digital development and IT. With our strong technical expertise and extensive network, we effectively match the right consultant with the right assignment. At Rasulson Consulting, you will receive personalized guidance, ongoing feedback, and the opportunity to take the next step in your career.
Visa mindre