Virtusa · USA
At Virtusa, every innovator has the potential to transform and lead in a digital world—but unlocking that potential takes more than technology; it takes a trusted partner who combines engineering excellence, creativity, and an AI-first mindset.
About the Role
We are looking for an experienced IT security risk management specialist to provide a managed service for preparing IT Security Plans (ITSP) for departments and executive agencies.
What You Will Do
Conducting comprehensive IT security risk assessments in accordance with the EC ITSRM methodology (IT Security Risk Management Methodology).
IT system modeling: identification of assets, interfaces, and dependencies.
Conducting threat modeling using threat catalogs.
Selection and justification of adequate security measures.
Creating complete IT Security Plan documents based on DIGIT.S1 templates.
Conducting risk assessments for cloud-hosted systems using shared responsibility models with Cloud Service Providers (CSP).
Conducting risk assessments for systems containing AI components.
Application of client frameworks regarding cloud and AI security.
Controls Baseline Validation (ITSP-CBV)
Performing validation of compliance with the security control set (55 Priority Controls or SNC Controls).
Performing compliance attestation using the GRC-Compliance tool.