Description

Lead security framework projects and maintain the overall account security posture and information security governance.

Responsibilities

• Manage security framework projects, certifications, and initiatives from initiation to deployment.
• Ensure account compliance for NIST 800-53, ISO 27001, and HITRUST certifications.
• Architect and deploy cloud security frameworks and solutions.
• Write comprehensive reports including assessment findings, outcomes, and system enhancement propositions.
• Establish organizational structures and processes to facilitate governance implementation.

Required Skills

• Active CISSP certification (Mandatory).
• 10+ years of direct experience in Cyber Security or IT Security governance.
• Expertise in NIST SP 800-53 controls and NIST SP 800-37 Risk Management Framework.
• Experience managing end-to-end internal and external audit programs for ISO 27001 and NIST 800-53.
• Deep knowledge of HIPAA security and privacy requirements and risk assessments.
• Experience with CMS MARS-E certification and Security Control Assessment.
• Hands-on experience with AWS, Linux, and software security.
• Knowledge of security systems including firewalls, IDS, anti-virus, authentication, and log management.
• Understanding of server operating platforms and security hardening for Windows and Linux.

Preferred Skills

• Knowledge of network protocols, secure network design, and web application security.
• Experience with security assessments, penetration testing, and incident response.

Key Skills

Education

ANY GRADUATE