Description

You will lead the management of information security and compliance activities using a risk-based approach.

Responsibilities

• Implement the NIST Cybersecurity Framework to improve organizational cyber resilience.
• Design, establish, and maintain organizational cybersecurity and information privacy postures.
• Own the enterprise IT audit process for SOC and PCI reporting.
• Lead incident response, including forensic investigations, mitigation procedures, and post-event analysis.
• Manage the security tool suite, including endpoint protection, vulnerability assessment, and log aggregation.
• Collaborate with the CIO/CTO to define and maintain security policies and guidelines compliant with federal and state regulations.
• Conduct risk assessments, vulnerability audits, and monitor network activity for signs of intrusion.
• Manage security vendors, department budgets, and annual capital expenditure planning.

Required Skills

• 5+ years of experience in information technology or cybersecurity management.
• Direct experience with NIST, HIPAA, ITIL, SANs, COBIT, OWASP, and ISO standards.
• Hands-on experience with Cyber Security Services (CSS).
• Expertise in physical security access control systems and Internet of Things (IoT) security.
• Proven ability to manage patch management, firewall configurations, and data security best practices.
• Experience leading vulnerability audits and forensic investigations.
• Ability to manage and train staff on information security best practices and compliance.
• Knowledge of managing records in accordance with organizational management policies.

Key Skills

Education

Any Graduate