Senior Security Assurance Specialist

TransUnion's Job Applicant Privacy Notice
What We'll Bring:
Neustar, a TransUnion company, is seeking a Senior Security Assurance Specialist to join the Internal Risk & Compliance (IRC) team. The Senior Security Assurance Specialist will provide assurance to our customers and other stakeholders that we have a strong control environment based on best practices and industry standards, and we are compliant with our security requirements.
What You'll Bring:
As a member of IRC, you will, working independently and as part of the team:

• Respond to security related questions from customers. These will primarily be in the form of pre-sales questionnaires and post-sales control assessments but will also be from ad hoc inquiries. This will include all related activities to ensure proper tracking, prioritization, communication with and engagement of internal functions/personnel, and complete and accurate responses to customers, by agreed upon due dates.
• Review customer contracts to identify and edit security related terms and conditions to ensure requirements are addressed through existing controls or require escalation and approval by relevant management.
• Assist with managing and maintaining the repository of related and supporting materials to complete questionnaires and review/edit contracts, including prior questionnaires and contracts, authoritative responses/clauses, and relevant documentation and artifacts.
• Assist with customer, SOC 2, PCI and third-party audits. Activities include interfacing with customer and third-party auditors, completing pre-audit questionnaires, working with internal teams and subject-matter experts needed to help support audits, facilitating interviews, providing documentation and artifacts, recording, tracking, and communicating audit findings to relevant management and stakeholders, and post-audit follow ups to help ensure findings are remediated and communicated to relevant customers.
• Identify opportunities to improve processes and documentation, and take actions to help drive and implement improvements.
• Develop expertise with, and stay current on, our security requirements, including security policies, standards, processes, controls, and applicable laws and regulations.
• Develop a working knowledge of each customer-facing service offered by the company and their specific security requirements.
• Perform all responsibilities and complete all deliverables completely, accurately, and in a timely manner or by agreed upon dates.

Impact You'll Make:
Your Qualifications

• 3 years experience in a similar role: responding to security questionnaires, reviewing/editing security requirements in contracts, and/or facilitating customer and third-party audits.
• Experience communicating and interacting with customers, management, and internal teams, in written and verbal forms, and via video in online meetings.
• Prior experience in IT/security compliance or information security is a plus.
• Knowledge of and/or experience with security compliance certifications and standards such as SOC2, CIS, NIST CSF and 800 series, PCI, ISO 27001/2, or similar standards is a plus.
• Must be self-motivated, proactive, well-organized, and have a positive attitude.
• Must be comfortable in a challenging environment working on multiple tasks simultaneously with shifting priorities.
• Bachelor's degree is preferred.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, veteran status, marital status, citizenship status, sexual orientation, gender identity or any other characteristic protected by law.
TransUnion's Internal Job Title:
Consultant, Risk Management