What you’ll be doing... Verizon is hiring a talented Principal - Security Risk Management to support the Risk Management & Compliance (RM&C) program across Verizon Business Group (VBG). As a member of the RM&C team, you will be assigned to perform the following compliance and risk management activities: Evaluate new products and/or product feature enhancements for VBG by gathering and analyzing artifacts then identifying potential risks that fall outside of Verizon’s risk tolerances. Review attestation documentation sufficient to ensure compliance with Verizon related policies and procedures. Collaborate with other stakeholders as needed to ensure new products and/or product feature enhancements are in compliance with Verizon policies and standards. Review and comprehend High Level Architecture (HLAs) diagrams and maintain confidentiality of all artifacts provided for review. Provide technical leadership and serve as an information security subject matter expert for associated compliance initiatives. Track and report on project status and communicate issues or gaps. What we’re looking for... You’ll need to have: Bachelor’s degree in information Security or four or more years of work experience. Six or more years of relevant work experience. Experience with Microsoft Office Suite with proven focus on Excel and PowerPoint. One or more industry recognized IT Security Certification / Certificates such as: GIAC, ISACA (CISM CISA, CRISC, etc.), ISC (2) family of certifications (CISSP, CCSP, CCFP, CSSLP, HCISSP, SSCP), Cloud Security Alliance Certificate of Cloud Security Knowledge (CCSK). Even better if you have: Master’s degree in Information Security. Strong analytical and problem solving skills. Ability to write technical reports and interpret analytical results. AWS Certified Solutions Architect Associate or Professional and/or AWS Certified Security Specialty. Excellent communication skills and ability to focus on the details. Project management experience. Knowledge on how business and technical requirements interleave to create solutions. Knowledge of threats, risks, vulnerabilities and confidentiality, integrity and availability of systems and services. Experience in networking (TCP/IP and related concepts). Knowledge of Linux/Windows operating systems. Knowledge of vulnerability scanning and penetration testing tools and methods. Knowledge of application security – Web & Mobile and API’s and associated tools & methodologies to assess application security. Knowledge of event log management and security event response. Knowledge of network & cyber risk assessments and audit methods and practices. Working knowledge of SOC 1/2/3 internal control reports and FedRAMP requirements. Working knowledge of PCI, HIPAA and CJIS compliance requirements. Knowledge of data classifications and data flows. Working knowledge of technologies used for data security in on premise and cloud based environments. Knowledge of AWS security best practices. When you join Verizon... You’ll have the power to go beyond – doing the work that’s transforming how people, businesses and things connect with each other. Not only do we provide the fastest and most reliable network for our customers, but we were first to 5G - a quantum leap in connectivity. Our connected solutions are making communities stronger and enabling energy efficiency. Here, you’ll have the ability to make an impact and create positive change. Whether you think in code, words, pictures or numbers, join our team of the best and brightest. We offer great pay, amazing benefits and opportunity to learn and grow in every role. Together we’ll go far. Equal Employment Opportunity We're proud to be an equal opportunity employer - and celebrate our employees' differences, including race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, and Veteran status. Different makes us better.