Risk Assessment Specialist

As a Risk Assessment Specialist at ABBYY, you will play a crucial role in enhancing the risk management framework and driving information security initiatives. Your responsibilities will include: - Risk Assessment Leadership: Lead the design and implementation of risk assessment methodologies, frameworks, and processes to identify, analyze, and prioritize risks related to information security. - Risk Analysis: Conduct comprehensive risk assessments, including threat modeling and vulnerability assessments, to evaluate the potential impact of security incidents on the organization. - Collaboration: Work closely with cross-functional teams, including IT, compliance, and business units, to ensure alignment of risk management strategies with organizational objectives. - Reporting: Prepare detailed risk assessment reports for senior management and the board, outlining key findings, risk ratings, and recommended mitigation strategies. - Policy Development: Contribute to the development and revision of security policies, standards, and procedures based on risk assessment outcomes and industry best practices. - Continuous Monitoring: Establish mechanisms for ongoing risk monitoring and reassessment, ensuring that the organization remains aware of emerging threats and vulnerabilities. - Training and Awareness: Develop and conduct training programs to promote a culture of risk awareness and security best practices among employees. - Regulatory Compliance: Ensure that risk assessment activities align with relevant regulations and standards (e.g., ISO 27001, NIST, GDPR), and assist with audit preparation and responses. Qualifications required for this role include: - Bachelor's degree in Information Security, Risk Management, Computer Science, or equivalent experience. - 8 years of experience in information security, risk assessment, or a related field, with a focus on leading risk management initiatives. - In-depth knowledge of risk assessment frameworks and methodologies, including qualitative and quantitative risk analysis. - Strong understanding of information security principles, best practices, and regulatory requirements. - Exceptional analytical skills, with the ability to synthesize complex information and provide actionable insights. - Excellent communication and interpersonal skills, with experience presenting to senior leadership and cross-functional teams. - Proficiency with risk assessment tools and software. Preferred qualifications for the role include relevant certifications (e.g., CISSP, CISM, CRISC, CISA) and experience in a leadership role within a risk management or information security function. Join ABBYY and be part of a global team that values diversity, innovation, and excellence. With over 35 years of experience in the technology market and a portfolio of over 10,000 customers, including many Fortune 500 companies, ABBYY offers a dynamic and supportive work environment where you can grow both personally and professionally. As a Risk Assessment Specialist at ABBYY, you will play a crucial role in enhancing the risk management framework and driving information security initiatives. Your responsibilities will include: - Risk Assessment Leadership: Lead the design and implementation of risk assessment methodologies, frameworks, and processes to identify, analyze, and prioritize risks related to information security. - Risk Analysis: Conduct comprehensive risk assessments, including threat modeling and vulnerability assessments, to evaluate the potential impact of security incidents on the organization. - Collaboration: Work closely with cross-functional teams, including IT, compliance, and business units, to ensure alignment of risk management strategies with organizational objectives. - Reporting: Prepare detailed risk assessment reports for senior management and the board, outlining key findings, risk ratings, and recommended mitigation strategies. - Policy Development: Contribute to the development and revision of security policies, standards, and procedures based on risk assessment outcomes and industry best practices. - Continuous Monitoring: Establish mechanisms for ongoing risk monitoring and reassessment, ensuring that the organization remains aware of emerging threats and vulnerabilities. - Training and Awareness: Develop and conduct training programs to promote a culture of risk awareness and security best practices among employees. - Regulatory Compliance: Ensure that risk assessment activities align with relevant regulations and standards (e.g., ISO 27001, NIST, GDPR), and assist with audit preparation and responses. Qualifications required for this role include: - Bachelor's degree in Information Security, Risk Management, Computer Science, or equivalent experience. - 8 years of experience in information security, risk assessment, or a related field, with a focus on leading risk management initiatives. - In-depth