Description

This position supports the effort to continue the maturity of the business by continually searching for opportunities to improve compliance processes, policy, and security risk dynamics. This job manages the risk assessment process for Information Technology initiatives and play a key role in managing IT risks and compliance topics. 

Essential Functions:

Manages the internal, regulatory, SOX and external audit process, including participation in the audit kickoffs, walkthroughs, findings discussions, closing meetings and confection action plans.Work directly with internal and external auditors during IT audits to act as the liaison between IT and auditors.Review and respond to risk assessments as needed.Analyze business impact and exposure, based on emerging security threats, vulnerabilities, and risks.Prepare, manage, and deliver to end users the periodic access review process (re-certification) to ensure user profiles are appropriate.Contribute to the development and maintenance of the information security policies and standards.Maintain our Disaster Recovery & Business Continuity Plans.Gather documentation/technical information in support of audit requests and issue remediation efforts.Stay up to date on information technology trends and security standards, including financial Services and IT security trends and news, at a state, national and regulatory level.Develop company-wide best practices and policies for IT security.Coordinate or perform Penetration Tests and Vulnerability Scans and evaluate results to proactively identify and fix security flaws and vulnerabilities.Verify and coordinate detected vulnerabilities remediation measures to maintain a high-security standard.Responsible for assessing and prioritizing vulnerabilities utilizing a risk-based approach to expedite the remediation processPerform research and analysis of emerging and disruptive Information Technology / Information Security trends and tendencies that may affect the organization.

Execute any other duties assigned by the Supervisor.

Education:

Bachelor’s Degree in Information Technology from an accredited university or related experience in supporting regulated systems.

Technical training, license, certifications and/or other requirements:

CISA, CRISC, CISM

MCSA: Windows Server, Security +

Experience:

The position requires two (2) years of related experience.

Special skills, knowledge and abilities (competencies):

Language skills in Spanish and English. Ability to read and understand instructions, correspondence, and memos. Ability to write simple correspondence and make simple presentations of information, effectively, an individual or small groups of customers and other employees of the organization.

Strong analytic thinking capacity.

Strong quantitative problem-solving ability.

Strong computer literacy with MS Office software. Expert in the use of MS Excel.

Statistical, financial and mathematics skills.

Ability to work independently, organize workload, prioritize, multitask, foresee problems, and accomplish established work plan on a timely manner.

Ability to maintain confidential data.

Ability to adapt easily to change.

Ability to work with a goal-oriented operation.

Ability to develop and maintain productive relationships with customers and internal departments.

Ability to deal with problems involving some variables in common situations. 

 

Aerostar Airport Holdings, LLC is an equal opportunity employer.