Description

Lead information security and compliance activities using a risk-based approach.

This role is on-site.

Responsibilities

• Implement the NIST Cybersecurity Framework to improve organizational cyber resilience.
• Design, establish, and maintain organizational cybersecurity and information privacy postures.
• Own the enterprise IT audit process for SOC and PCI reporting.
• Lead incident response, including forensic investigations, mitigation procedures, and post-event analysis.

Required Skills

• 5+ years of experience in information technology or cybersecurity management.
• Direct experience with NIST, HIPAA, ITIL, SANs, COBIT, OWASP, and ISO standards.
• Hands-on experience with Cyber Security Services (CSS).
• Expertise in physical security access control systems and Internet of Things (IoT) security.
• Proven ability to manage patch management, firewall configurations, and data security best practices.
• Experience leading vulnerability audits and forensic investigations.
• Ability to manage and train staff on information security best practices and compliance.

Preferred Skills

• Ability to manage security vendors, department budgets, and annual capital expenditure planning.
• Collaborate with the CIO/CTO to define and maintain security policies compliant with federal and state regulations.

Key Skills

Education

Any Graduate