Description

Major Job Functions

Cybersecurity Advisory & Risk Support

• Support cybersecurity risk assessments for applications, infrastructure, and business initiatives.
• Participate in solution and design reviews by providing security input aligned with Finning security standards.
• Identify control gaps and document risk observations with recommended remediation options.
• Assist with threat modeling and security review activities using established templates and processes.

Governance, Risk & Compliance

• Support compliance activities aligned to frameworks such as ISO 27001, NIST, and internal Finning security standards.
• Assist with evidence collection and control validation activities for audits and assessments.
• Contribute to the maintenance of security policies, standards, and guidance documentation.
• Track assigned risks and remediation actions in accordance ...