Address
Form of workJob Description
Ascent is a leading provider of comprehensive solutions for the planning, design, engineering, development and operation of data centres and other mission critical facilities. Headquartered in Saint Louis, MO, Ascent specializes in powerful, efficient and technologically advanced mission critical facilities and offers clients a broad range of delivery models spanning shell & core, build-to-suit, turnkey and outsourced critical systems operations. Founded in 1998, Ascent provides a full spectrum of fast track services that include project programming, design management, facility assessment, development and construction management, commissioning and ongoing maintenance operations. Today, Ascent focuses on providing clients with innovative solutions and services yielding the highest levels of operational autonomy, efficiency and control. Ascent's clients include some of the most demanding mission critical organizations spanning multiple industries, Fortune 500 firms, and service providers.
Job Description- Collaborate with different departments and customers in the analysis, response, and document packages of Due Diligence Questionnaires (DDQs) and risk questionnaires as required by clients of Ascent.
- Foster relationships with security, software engineering, operations, and business stakeholders to strengthen security governance and risk management.
- Facilitate HIPAA, SOC1, SOC2, ISO 27001, and PCI audit engagements, data/artifact collection, exception remediation and monitoring.
- Provide support and contribute to Ascents GRC programs such as: Policy Management, Risk Management, Third Party/Vendor Management, Compliance Management, and others.
- Contribute to the execution of the overall security governance and risk management program.
- Assist with development of audit reports and summarize them to facilitate remediation tasks for other IT operational teams.
- Contributes to maintenance and update of library of information security control policies and standards based on ISO 27001 and other industry best practices.
- Maintain awareness of changes or updates on security control frameworks, compliance laws and statutes and identify the impact to the business and its security posture.
- Conduct or participate in cross-training sessions with the Operations team in the management and configuration of security tools and technical controls.
- Providing updates, status, and completion information to leadership.
- Complete certification training on new technologies, compliance standards, and security on an annual basis (Security+, Project+, ITIL, etc)
- Six or more years in an IT Operations and information security role
- Associates Degree in Information Systems / Computer Science preferred
- Security+, Systems Security Certified Practitioner (SSCP), or equivalent
- The candidate must possess strong problem solving and troubleshooting skills
- Candidate must possess strong documentation and communication skills
- The candidate must be flexible and able to adapt to a rapidly changing environment
- The candidate must have a broad range of technical skills with a strong desire to expand skillset constantly
- Must be a positive, self-motivated individual who can complete goals independently
Additional Information
This position reports to the VP, Technology
All interested candidates should apply through the ad or visit www.ascent-corp.com and select the careers tab to apply for the position.
Ascent, LLC offers a full benefits package including medical, dental, vision, STD/LTD, life insurance, 401(k), PTO, paid holidays, casual work environment, and more.
Ascent, LLC is an Equal Opportunity Employer
