SVVP Security Control Consultant

• Objective:
• Ensures security controls are effectively deployed validated and aligned with security standards.
• Scope:
• Executes the security control lifecycle-providing inputs on configuring deploying validating and refining controls based on results. Acts as the hands-on executor of SVVP technical requirements
• Deployment of Security Controls:
• Deploy security measures based on the SVVP framework to ensure proper protection across network access controls and data protection mechanisms.
• Install and configure necessary tools for continuous security enforcement within the data center and across all migration environments.
• Compliance Testing and Security Control Validation:
• Compliance Test the integration of security protocols such as firewalls access control lists (ACLs) encryption tools etc. within the data center.
• Validate the effectiveness of security controls based on defined security requirements and SOC 2 compliance criteria.
• Operationalization of Security Controls:
• Activate security controls to monitor and enforce security measures during the migration.
• Coordinate the enforcement of security policies to protect infrastructure during the transition and reduce risk exposure.
• Incident Response Compliance Testing:
• Compliance Test incident response protocols to ensure readiness in case of breaches or security incidents during migration.
• Ensure proper configuration of monitoring tools to detect respond and report security events in real-time.

Required Skills

• 5 years of experience in Security Audit / Automation
• 5 years of experience with SIEM Tools
• 5 years of experience with Microsoft Azure
• 7 years of Cybersecurity and IT control experience
• 7 years of experience performing formal control validation/testing
• 7 years of experience supporting compliance audits (SOC 2)
• 7 years of experience testing incident response procedures
• 7 years of experience supporting infrastructure and data center initiatives
• 7 years of experience testing escalation and breach notification processes