Description

You will implement information security and compliance programs for both IT and Operational Technology (OT) systems.

Responsibilities

• Conduct written risk assessments for existing and new systems, solutions, and services.
• Manage and resolve security risks and threats to business information and operational systems.
• Evaluate systems and contracts for alignment with security policies, standards, laws, and regulations.
• Monitor information security industry trends, tools, and techniques.
• Work with cross-functional teams to mitigate or remediate system and application vulnerabilities.

Required Skills

• 5 years of experience evaluating information security and compliance for IT and OT systems.
• 5 years of experience conducting written risk assessments using NIST, CIS Critical Controls, or ISO 27001.
• 4 years of experience triaging and determining mitigation plans for security risks.
• 4 years of experience evaluating COTS and custom developed business systems against security standards.
• 3 years of experience evaluating security controls for cloud environments.
• 3 years of experience working with cross-functional teams on vulnerability remediation.
• Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field.
• Certifications: GICSP, GSEC, CISSP, CSP, CCSK, or CompTIA Cloud+.
• Technical knowledge: GCSA, CompTIA Network+, CompTIA Security+, or CompTIA CySA+.

Key Skills

Education

Bachelor's degree