Description

You will lead the development and management of the IT risk management program to identify and monitor information security risks.

Responsibilities

• Lead the implementation of the corporate-wide IT risk management program and continuous monitoring processes.
• Assess security controls for information systems and provide recommendations to senior management.
• Develop and implement policies, procedures, and practices to secure sensitive data and ensure legislative compliance.
• Execute audit strategies for internal and external assessments, including NIST 800-53, FISMA, and FedRAMP.
• Recruit, train, and support a team of IT GRC analysts.

Required Skills

• 10 years of experience in IT support, operations, and team management.
• Extensive knowledge of information security risk frameworks, specifically NIST 800-53.
• Experience performing risk assessments and information security auditing processes.
• Proficiency with AWS Cloud Engineering, Splunk, Okta, Qualys, Crowdstrike, Qualtrics, Acquia, and Box.
• Strong formal report writing and presentation skills.
• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.

Preferred Skills

• Master’s degree in a relevant field of study.

Key Skills

Education

Bachelor’s or Master’s degree