Senior Specialist, Security

Responsibilities

• Lead ITGC compliance efforts within the Enterprise Applications team.
• Map enterprise application processes to relevant ITGC controls, including access management, change management, and data backups.
• Partner with internal and external auditors during controls testing and evidence collection.
• Provide technical oversight on application-level access controls, segregation of duties, and change tracking.
• Collaborate with DevOps, security, and business teams to embed security and compliance into application lifecycle processes.
• Guide and enable teams to comply with ITGC controls and standard certification formats.

Requirements

• Strong understanding of ITGC control domains such as user access, change management, and backup/recovery.
• Proven experience with SOX or other relevant compliance frameworks.
• Experience with standard certification programs, specifically ISO 20K or ISO 27K.
• Familiarity with application security principles, including OWASP Top 10 and secure SDLC.
• Hands-on knowledge of enterprise applications such as Netsuite or Oracle.
• Strong documentation and process improvement capabilities.
• Experience interfacing with auditors and managing walkthroughs.

Preferred Qualifications

• Background in enterprise IT audit, IT compliance, or IT risk management.
• Technical understanding of application architectures, including APIs, SSO, and RBAC.
• Exposure to security tools such as IAM systems, logging/monitoring solutions, and CI/CD pipelines.

About the Company

Brillio is a digital transformation leader that helps companies create the future they aspire to through expertise in Product & Platform Engineering, Data & AI, and Cloud & Security.