Description

You ensure information security for an assigned business or project area, focusing on defined risk areas per the Information Security policy.

Responsibilities

• Conduct Information Security risk assessments and compliance evaluations for infrastructure and application assets against industry and regulatory standards.
• Implement and verify security controls to mitigate identified Information Security risks within your area of responsibility.
• Define, create, and maintain documentation for information system certification and accreditation per regulatory mandates.
• Lead and support security posture audits and client reviews, tracking the remediation of all findings and exceptions.
• Collaborate on process improvements, secure design, and asset recertification with the Information Security team.

Required Skills

• Bachelor's degree and 7+ years of relevant professional experience.
• US Citizenship is required.
• Experience with NIST 800-53.
• HIPAA experience.
• Experience with Cloud providers, specifically Azure and AWS.
• Familiarity with CISA or CISM certifications.
• Ability to perform risk assessments using vulnerability management and application security testing reports.

Key Skills

Education

Bachelor's degree