Application Security Risk Reviewer
MTP Brasil
full-time
Posted on:
Location Type: Remote
Location: Remote • Brasil
Visit company websiteJob Level
Mid-LevelSenior
Tech Stack
Splunk
About the role
- Review tickets for inconsistencies in advance of ERV calls
- Validate ticket information in the activity tab (validation block)
- Schedule ERV calls
- Work with the Risk Manager to clarify questionable items and the ticket review approach
- Research previous tickets, including upstream and downstream relationships and tickets for other firms — discuss inconsistencies with the Risk Manager
- Maintain and monitor a dashboard of your ticket statuses
- Monitor the activity tab for customer communications
- Review and action pending items/responses in a timely manner (in line with SLOs)
- Participate in team calls and ideation exercises
- Communicate effectively with senior staff and stakeholders
- Review related CRS and SRT tasks and update record documentation accordingly
- Track the progress of tickets through the Issue Management stage and manage integration with ancillary NIS teams: Global Workspace; M365; Third Party Risk Management; Splunk; Business Continuity; Mobile Application Management; BISO/CISO teams
Requirements
- Customer service skills to create an exceptional customer experience
- Strong organizational and time-management skills to support multiple concurrent reviews
- Self-awareness
- Quick learner — ability to apply training and coaching into practice
- Proactively asks questions to deepen understanding of processes, the business, and solutions
- Knowledge of the Information Security Policy, Application Readiness Standard, and applicable supporting standards
- Understand the purpose of the Application Readiness process
- Ability to interact with customers and ensure they understand required actions
- Ability to assess whether a control is 'met' or 'not met' (black and white)
- Ability to review documentation analytically and assess control compliance based on provided information/documentation
- Ability to evaluate complex data and determine whether it supports the reviews being conducted
- Ability to extract facts and details related to controls from different types of documentation and diagrams
- Interface with customers to ask clarifying questions, prompt for responses to open items, provide guidance on next steps, and schedule meetings
- Interface with AR Risk Manager(s) and AppSec Architects to provide status and raise flags/concerns related to IT security risk
- Document work in the SNow AR ticket
- Strong English written and verbal skills
Benefits
- Health insurance
- Dental insurance
- Meal voucher
- Mobility voucher
- Culture voucher
- Education voucher
- Life insurance
- Mental health and wellness program
- Childcare assistance
- Partner discounts
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
ticket reviewdocumentation assessmentdata evaluationcontrol compliance assessmentcustomer communicationissue managementdashboard monitoringapplication readinessinformation security policyrisk management
Soft skills
customer serviceorganizational skillstime managementself-awarenessquick learnerproactive questioninganalytical skillseffective communicationinterpersonal skillsteam collaboration