Logo
SMASH

Cyber Governance & Risk Function Skills (P-117)

SMASH, Salt Lake City, Utah, United States

Save Job

Overview

SMASH is an agent for tech professionals in Costa Rica and Colombia that helps them build careers in the United States. We aim to find the perfect match by evaluating technical skills and cultural fit, moving away from traditional contractor or outsourcing representations, and focusing on long-lasting relationships with our talent. This is a remote position for Costa Rica, with requirements to have citizenship or a work permit from Costa Rica to apply. Eligible applicants: 3 days ago Be among the first 25 applicants. This description includes job postings and related opportunities; see specific items below for current roles and related details. Responsibilities (Cyber Governance & Risk Function Skills)

Control Ownership & Accountability: Define and maintain ownership of cybersecurity controls within operational teams, ensuring they are implemented, monitored, and continuously improved. Risk Assessment & Control Mapping: Conduct cyber risk assessments and map risks to specific controls, ensuring alignment with regulatory risk-based approaches (e.g., NCUA or FFIEC). Governance Framework Development: Establish governance structures (e.g., RACI models, control libraries, policy frameworks) that clarify roles, responsibilities, and accountability within the cyber function. Metrics, KRIs, and Reporting: Develop and maintain meaningful metrics and Key Risk Indicators (KRIs) that reflect control effectiveness, risk posture, and compliance with internal and regulatory expectations. Policy Implementation & Standards Enforcement: Translate enterprise-level policies into actionable standards and procedures for cyber teams, and ensure consistent enforcement and documentation. Seniorities, Employment Type, and Scope

Seniority level: Entry level Employment type: Full-time Job function: Other Industries: Staffing and Recruiting Includes additional notes: Referrals increase your chances of interviewing at SMASH. This is a remote position with US company collaboration; citizenship or work permit from Costa Rica is required to apply for this role. Related postings and notices (for awareness only): Cybersecurity Engineer (SOAR) [JOB ID 20250924] Information Security Engineer, Jr - 2 Year Contract (IAM and Platforms) Information Systems Security Officer (ISSO) Cybersecurity Analyst Careers - R10193019 Cybersecurity Analyst / Principal Cybersecurity Analyst - 16297 - R10208076 Senior Application Security Engineer (Remote) Principal Cybersecurity Analyst - R10206722

#J-18808-Ljbffr