Security Assessment Coordinator

The Security Assessment Coordinator will work closely with Information Security, Technology, Business stakeholders, vendors and external testing partners to support the effective delivery of cybersecurity assessment activities across the Firm.

The role holder will be responsible for coordinating and managing security assessments, including application, infrastructure, third-party and compliance-related reviews, ensuring activities are appropriately scoped, tracked and completed. They will support the timely remediation of findings, maintain accurate reporting and documentation, and help drive effective communication and governance throughout the assessment lifecycle.

Main responsibilities:

Assessment Planning and Coordination:

• Coordinate security assessments across applications, infrastructure, cloud environments, and third-party services.
• Schedule and manage penetration tests, vulnerability assessments, security architecture reviews, and compliance assessments.
• Serve as the primary liaison between assessment teams, project managers, technology owners, vendors, and business stakeholders.
• Track assessment requests, scope definitions, prerequisites, timelines, and deliverables.
• Ensure assessment activities align with organizational security policies and standards.

Stakeholder Management:

• Facilitate assessment kickoff meetings and status updates.
• Communicate assessment schedules, requirements, risks, and outcomes to stakeholders.
• Coordinate information gathering and documentation required for assessments.
• Escalate scheduling conflicts, resource constraints, and critical security issues as appropriate.

Findings Management and Remediation Tracking:

• Maintain a centralized repository of assessment reports and findings.
• Track remediation activities and validate completion of corrective actions.
• Monitor remediation timelines against internal standards, risk tolerances, and regulatory requirements.
• Coordinate periodic reviews of open findings with technology teams.
• Prepare risk acceptance documentation when remediation is not feasible within required timeframes.

Reporting and Metrics:

• Develop and maintain security assessment dashboards and reports.
• Track key performance indicators (KPIs), including:
• Assessments completed
• Findings by severity
• Open remediation items
• Aging of findings
• Assessment throughput
• Risk trends
• Prepare executive-level reporting for cybersecurity leadership and governance committees.

Process Improvement:

• Identify opportunities to improve assessment workflows, reporting, and stakeholder engagement.
• Assist with the development and maintenance of assessment procedures and standards.
• Support automation initiatives related to assessment management and findings tracking.
• Maintain assessment documentation, templates, and standard operating procedures.

Compliance Support:

• Support audit and compliance initiatives by providing assessment evidence and documentation.
• Assist in demonstrating compliance with frameworks and standards such as:
• NIST Cybersecurity Framework (CSF)
• NIST 800-53
• ISO 27001
• ISO 42001
• CIS Controls
• PCI DSS

GDPR and other applicable regulations:

• Ensure all security assessment requests are accurately scoped and documented.
• Collaborate with business and technical system owners to understand requirements and translate them into actionable security tasks.
• Apply knowledge of service management tools in a large corporate environment to track, monitor, and manage assessment workflows.
• Monitor ticket queues, proactively identify and resolve blockages, and ensure timely completion of assessments.
• Maintain records of assessment findings and follow up on corrective actions.
• Report regularly to management on assessment status, trends, and process improvement opportunities.
• Identify and recommend improvements to assessment processes and tools.
• Ensure compliance with security policies, procedures, and data classification requirements.
• Support audit preparation and respond to information requests as needed.

Skills and experience:

Required:

• Bachelor's degree in Cybersecurity, Information Technology, Business Administration, or related field, or equivalent experience.
• 3+ years of experience in cybersecurity, risk management, IT governance, project coordination, or a related field.
• Strong understanding of information security frameworks, security concepts, policies, and data classification requirements.
• An understanding of principles, theories, techniques, and methods of information system analysis and risk assessment
• Experience coordinating projects involving multiple stakeholders and deadlines.
• Strong organizational and documentation skills.
• Ability to manage multiple concurrent assignments.
• Excellent written and verbal communication skills.
• Proficiency with Microsoft 365 applications, including Excel, Word, PowerPoint, Teams, and SharePoint.

Preferred:

• Experience supporting security assessments, penetration testing, vulnerability management, or compliance programs.
• Familiarity with security frameworks and regulatory requirements.
• Experience using governance, risk, and compliance (GRC) platforms.
• Experience with project management or workflow tools such as ServiceNow, Jira, Azure DevOps, or similar platforms.
• Knowledge of cloud security concepts within Microsoft Azure, AWS, or Google Cloud environments.

One or more of the following certifications are preferred:

• Security+
• Certified in Cybersecurity (CC)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• PMI CAPM or PMP
• ITIL Foundation