Senior Information Security Consultant involved in compliance assessments and IT audits for various security standards. Based in Athens, Greece with a focus on Information Security Policies and Risk Assessment.
About the role
- Security Specialist evaluating and mitigating risks for PNC's cybersecurity posture. Collaborating on security policies and procedures to enhance compliance and safeguard information.
Responsibilities
- Provides technical evaluation and analysis in a specific Security area
- Supports activities, process, and tools needed to improve overall security posture of the organization
- Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation
- Performs investigation and data loss prevention, data manipulation, and coordination of activities
- Performs actions to address or mitigate risks and vulnerabilities
- Reviews and defines controls
- Advises on more complex security procedures and products for clients, security administrators, and network operations
- Participates in enforcement of control security risks and threats
- Shares knowledge with staff
- Conducts security assessments and other information security routines consistently
- Investigates and recommends corrective actions for data security related to established guidelines
- Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats
Requirements
- 5+ years of industry-relevant experience
- Familiarity with NIST
- Experience in risk management, policy/governance, IT controls, or cybersecurity, within CIAM/IAM or directly related identity domains
- Demonstrated experience writing policies/standards/procedures and mapping them to controls and evidence
- Experience with CIAM concepts: authentication flows, MFA factors, federation (OIDC/OAuth2, SAML), identity proofing, session security, risk-based auth
- Working knowledge of risk frameworks and governance approaches: e.g., NIST 800-53/63, ISO 27001/27002, FFIEC expectations; three lines of defense model; issue/exception management
- Strong written communication skills: policy drafting, risk narratives, control design, audit responses
- Analytical skills: define KRIs/KCIs/KPIs, interpret trends, and present data-driven recommendations
- Certifications: CIPM, CISA, CRISC, CISM, CGEIT, CISSP, CCSP, or vendor CIAM certs
Benefits
- medical/prescription drug coverage (with a Health Savings Account feature)
- dental and vision options
- employee and spouse/child life insurance
- short and long-term disability protection
- 401(k) with PNC match
- pension and stock purchase plans
- dependent care reimbursement account
- back-up child/elder care
- adoption, surrogacy, and doula reimbursement
- educational assistance, including select programs fully paid
- a robust wellness program with financial incentives
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Project Manager overseeing Enterprise Security Compliance initiatives at MTM. Managing compliance and security activities, ensuring project completion within budget and scope.
Cyber security leader driving advanced analytics and fraud prevention strategies at Sun Life. Establishing operational models and analytics capabilities for proactive risk mitigation and incident response.
Senior Manager of Cloud Network Engineering & Security leading enterprise - wide network evolution. Hands - on technical leadership focusing on cloud networking in AWS and Azure from Dallas headquarters.
Light Maintenance Security Officer handling routine maintenance tasks and event setups for Ohio Support Services. Assisting building engineers and ensuring facility operations meet standards.
IT Intern at AVIXA supporting cybersecurity, networking, and user support for a non - profit. Engaging in hands - on experience while working closely with the IT team during summer.
Security Officer ensuring safety and security of staff, patients, and visitors at Kent Hospital in Warwick, RI. Involves monitoring premises and enforcing policies and procedures.
Technical Specialist in Cybersecurity managing endpoint protection, email filtering, and workload security. Collaborating with SOC teams and presenting findings effectively.
Technical Lead in Cybersecurity focusing on threat monitoring and vulnerability assessments for the company. Collaborate with analysts and stakeholders to enhance cybersecurity measures.
Facility Security Officer managing Industrial Security at Curtiss - Wright. Overseeing physical, personnel, and information security while ensuring compliance with government regulations.