Own and govern the policy exception and risk acceptance process, including escalation thresholds, decision authorities, and documentation of residual risk.
Design and review authentication and authorization models for cloud applications, ensuring strong access control, token handling, session management, cryptography, and data protection.
5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work
Own and govern the policy exception and risk acceptance process, including escalation thresholds, decision authorities, and documentation of residual risk.
Own and govern the policy exception and risk acceptance process, including escalation thresholds, decision authorities, and documentation of residual risk.