Description

You will implement information security and compliance programs for IT and Operational Technology (OT) systems, managing risk assessments and threat remediation.

This role is hybrid.

Responsibilities

• Conduct written risk assessments for existing and new systems, solutions, and services.
• Manage and resolve security risks and threats to business information and operational systems.
• Evaluate systems and contracts for alignment with security policies, standards, laws, and regulations.
• Monitor information security industry trends, tools, and techniques to maintain security posture.
• Work with cross-functional teams to mitigate or remediate system and application vulnerabilities.

Required Skills

• 5+ years evaluating information security and compliance for IT and OT systems.
• 5+ years conducting written risk assessments using NIST, CIS Critical Controls, or ISO 27001.
• 4+ years triaging and determining mitigation plans for security risks.
• 4+ years evaluating COTS and custom developed business systems against security standards.
• 3+ years evaluating security controls for cloud environments.
• 3+ years working with cross-functional teams on vulnerability remediation.
• Bachelor's degree in Information Security, Cybersecurity, Computer Science, or related field.
• Certifications: GICSP, GSEC, CISSP, CSP, CCSK, or CompTIA Cloud+.

Preferred Skills

• Technical certifications: GCSA, CompTIA Network+, CompTIA Security+, or CompTIA CySA+.

Key Skills

Education

Bachelor's degree