Security Assurance Specialist
SoftwareOne is a global provider of software and cloud solutions. With a presence in over 70 countries and more than 12,000 professionals, we help organizations optimize software investments, modernize applications, and unlock the value of cloud, data, and AI.
Our people are at the core of everything we do. We enable collaboration across borders, continuous learning, and opportunities to grow in a fast-evolving technology landscape. Whether your focus is on technology, customer success, or business operations, your ideas matter, and your contributions make a difference.
Join a global team where you can build your skills, work with leading technologies, and make a real impact for our customers.
The role
The Security Assurance Analyst is responsible for executing security assurance activities related to access control compliance and third-party security assessments. The role collaborates with internal teams and business stakeholders to ensure compliance with organizational security policies and applicable standards.
Key Responsibilities
- Access Control Compliance
- Collaborate with the Head of Security Assurance to plan periodic physical and logical access control compliance reviews across all regions.
- Work with IT, HR, and business teams to conduct logical access reviews and validate compliance with organizational policies.
- Coordinate with regional physical security and facilities teams to execute physical access control reviews as per the defined review frequency.
- Document findings, track remediation actions, and report compliance status to the Head of Security Assurance.
- Supplier & Vendor Security Assessments
- Conduct security assessments for new and existing suppliers, vendors, and third-party service providers.
- Review security questionnaires, certifications, audit reports, and supporting evidence.
- Assess vendor security controls against organizational requirements and identify potential risks.
- Document assessment findings, recommend remediation actions, and track risk mitigation with relevant stakeholders.
- Support periodic reassessments of critical vendors as part of the third-party risk management program.
- Other activities
- Coordinate with IT, HR, Procurement, Facilities, and business teams to ensure timely completion of security assurance activities.
- Support internal and external audits by coordinating evidence collection, tracking remediation actions, and maintaining compliance documentation.
- Support the Security Unit function in executing security assurance initiatives and other security related activities as assigned by the CISO Security Assurance manager.
What we need to see from you
- Bachelor’s degree in engineering or information technology or computer science, or a related discipline.
- 5–10 years of experience in Information Technology.
- Experience in Information Security, Security Assurance, IT Audit, or Governance, Risk & Compliance (GRC) is an added advantage.
- ISO/IEC 27001 Lead Auditor or Internal Auditor Certification, ISO/IEC 42001 Lead Auditor or Internal Auditor Certification is desirable.
Job Function
IT & Solutions
Accommodations
- Bachelor’s degree in engineering or information technology or computer science, or a related discipline.
- 5–10 years of experience in Information Technology.
- Experience in Information Security, Security Assurance, IT Audit, or Governance, Risk & Compliance (GRC) is an added advantage.
- ISO/IEC 27001 Lead Auditor or Internal Auditor Certification, ISO/IEC 42001 Lead Auditor or Internal Auditor Certification is desirable.
