JOB REQUIREMENTS AND QUALIFICATIONS
Education: 
• BS or MA in Computer Science, Information Security, or a related field 
Training Requirements (licenses, programs, or certificates): 
• Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) 

Experience: 
• 8+ years of Experience in developing IT Risk Management program strategies, operating models, policies, standards and reporting structures/metrics
• Excellent aptitude for modern IT Risk & Compliance concepts and methodologies.
• Must have expert-level ability to identify and assesses the severity and potential impact of risks and communicate risk assessment findings to risk owners in a way that consistently drives objective, fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance.
• Is a thought-leader, expert on emerging trends and technologies and able to apply current threats to the TriNet’s business model.
• Expert level knowledge of IT policies, laws, standards and frameworks applicable to the specific technical role e.g. NIST, ISO31000, ISO27000, and COSO.
• Comprehensive knowledge of IT risk, security architecture design, network security, cloud/mobile security, data security and internal/external threat intelligence/analysis
• Very strong verbal and non-verbal communication skills; able to communicate/present technical security details to a wide range of audiences
• Able to develop risk management processes and workflows and then train and coach users of those workflows. 
• Hands-on experience with risk assessment methodologies like CIS RAM, FAIR, OCTAVE, etc. a strong plus
Other Knowledge, Skills and Abilities: 
Candidates will be evaluated based on their ability to perform the duties listed above while demonstrating the skills and competencies necessary to be highly-effective in the role. These skills and competencies include: 

• An ability to identify and assesses the severity and potential impact of risks and communicate risk assessment findings to risk owners outside Information Security in a way that consistently drives objective, fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance
• BIG 4 audit experience preferred or internal audit experience in a large multi-national organization
• Ability to communicate effectively (both oral and written) and develop solid working relationships across multiple levels and organization boundaries
• An understanding of organizational mission, values, and goals and consistent application of this knowledge
• Ability to see ‘ambiguity’ as an opportunity as opposed to a hurdle, thrive on challenging yourself to push beyond conventional thinking.
• Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part 
• An ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one’s network within an organization
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one

WORK ENVIRONMENT/OTHER INFORMATION (Travel required, physical requirements, on-call schedules, etc.)
• 10-20% travel required
• Work in clean, pleasant, and comfortable office setting 
• The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Please Note: TriNet reserves the right to change or modify job duties and assignments at any time. The above job description is not all encompassing. Position functions and qualifications may vary depending on business necessity.

TriNet is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. Any applicant with a mental or physical disability who requires an accommodation during the application process should contact a company manager, a company officer or a TriNet HR representative to request such an accommodation.