Software Guidance & Assistance, Inc. (SGA) is searching for a Senior Information Security Advisor - Threat Risk Assessment & Security Architecture for a CONTRACT assignment with one of our premier Financial Services clients. This is a 100% remote position supporting U.S. Information Security and Control and working east coast hours
Responsibilities:
- Conduct Threat Risk Assessments (TRAs), threat modeling, and security assessments across applications, infrastructure, networks, cloud, hybrid cloud, and SaaS environments.
- Provide security advisory services to business lines and technology teams, ensuring solutions comply with enterprise security standards and U.S. regulatory requirements.
- Evaluate security architecture and technical designs to identify vulnerabilities, control gaps, and potential risks.
- Review and validate security controls, vulnerability reports, server hardening requirements, and remediation evidence.
- Provide quality assurance on TRAs and threat modeling for cloud initiatives.
- Support secure-by-design initiatives by incorporating security requirements into the early stages of technology projects.
- Recommend security solutions, compensating controls, and remediation strategies that balance security risks with business objectives.
- Collaborate with application development, infrastructure, architecture, and business teams to implement appropriate security controls.
- Ensure alignment with industry frameworks, regulatory requirements, and organizational security policies.
- Provide security risk oversight and advisory support for U.S. business lines and subsidiaries.
Required Skills:
- 5+ years of hands-on experience performing technical security assessments across applications, infrastructure, and network environments.
- 3+ years of experience conducting Threat Risk Assessments and threat modeling for on-premises, cloud, hybrid cloud, and SaaS environments.
- 2+ years of experience in security solution architecture, software development, or hands-on security implementations, including application security controls and compensating controls.
- 3+ years of experience reviewing vulnerability reports, server hardening requirements, and validating security controls through supporting evidence.
- Strong understanding of U.S. regulatory requirements and information security practices.
- Experience identifying security risks, evaluating technical controls, and recommending remediation strategies.
- Strong written and verbal communication skills, including the ability to present technical risks and recommendations to business and technology stakeholders.
- Post-secondary education in Computer Science or a related discipline.
Preferred Skills:
- Prior information security advisory experience within banking or financial services.
- Experience assessing cloud security environments, including AWS, Azure, or Google Cloud Platform.
- Knowledge of security frameworks including NIST 800-53, ISO 27001/27002, ISO 27017/27018, PCI DSS, and CIS Controls.
- Experience using ServiceNow.
- Security certifications such as CISSP, CISM, CCSP, or CRISC.
- Experience supporting secure-by-design initiatives and enterprise security architecture reviews.
By applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations.
#LI-SC1
SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .
SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.
