Security Assessment Coordinator

The Security Assessment Coordinator will work closely with Information Security, Technology, Business stakeholders, vendors and external testing partners to support the effective delivery of cybersecurity assessment activities across the Firm.

The role holder will be responsible for coordinating and managing security assessments, including application, infrastructure, third-party and compliance-related reviews, ensuring activities are appropriately scoped, tracked and completed. They will support the timely remediation of findings, maintain accurate reporting and documentation, and help drive effective communication and governance throughout the assessment lifecycle.

Main responsibilities

Assessment Planning and Coordination

• Coordinate security assessments across applications, infrastructure, cloud environments, and third-party services.
• Schedule and manage penetration tests, vulnerability assessments, security architecture reviews, and compliance assessments.
• Serve as the primary liaison between assessment teams, project managers, technology owners, vendors, and business stakeholders.
• Track assessment requests, scope definitions, prerequisites, timelines, and deliverables.
• Ensure assessment activities align with organizational security policies and standards.

Stakeholder Management

• Facilitate assessment kickoff meetings and status updates.
• Communicate assessment schedules, requirements, risks, and outcomes to stakeholders.
• Coordinate information gathering and documentation required for assessments.
• Escalate scheduling conflicts, resource constraints, and critical security issues as appropriate.

Findings Management and Remediation Tracking

• Maintain a centralized repository of assessment reports and findings.
• Track remediation activities and validate completion of corrective actions.
• Monitor remediation timelines against internal standards, risk tolerances, and regulatory requirements.
• Coordinate periodic reviews of open findings with technology teams.
• Prepare risk acceptance documentation when remediation is not feasible within required timeframes.

Reporting and Metrics

• Develop and maintain security assessment dashboards and reports.
• Track key performance indicators (KPIs), including:
• Assessments completed
• Findings by severity
• Open remediation items
• Aging of findings
• Assessment throughput
• Risk trends
• Prepare executive-level reporting for cybersecurity leadership and governance committees.

Process Improvement

• Identify opportunities to improve assessment workflows, reporting, and stakeholder engagement.
• Assist with the development and maintenance of assessment procedures and standards.
• Support automation initiatives related to assessment management and findings tracking.
• Maintain assessment documentation, templates, and standard operating procedures.

Compliance Support

• Support audit and compliance initiatives by providing assessment evidence and documentation.
• Assist in demonstrating compliance with frameworks and standards such as:
• NIST Cybersecurity Framework (CSF)
• NIST 800-53
• ISO 27001
• ISO 42001
• CIS Controls
• PCI DSS

GDPR and other applicable regulations

• Ensure all security assessment requests are accurately scoped and documented.
• Collaborate with business and technical system owners to understand requirements and translate them into actionable security tasks.
• Apply knowledge of service management tools in a large corporate environment to track, monitor, and manage assessment workflows.
• Monitor ticket queues, proactively identify and resolve blockages, and ensure timely completion of assessments.
• Maintain records of assessment findings and follow up on corrective actions.
• Report regularly to management on assessment status, trends, and process improvement opportunities.
• Identify and recommend improvements to assessment processes and tools.
• Ensure compliance with security policies, procedures, and data classification requirements.
• Support audit preparation and respond to information requests as needed.

Skills and experience

Required

• Bachelor's degree in Cybersecurity, Information Technology, Business Administration, or related field, or equivalent experience.
• 3+ years of experience in cybersecurity, risk management, IT governance, project coordination, or a related field.
• Strong understanding of information security frameworks, security concepts, policies, and data classification requirements.
• An understand