Description

You will manage, assess, and ensure compliance with CMS, USDA, ACF, State of NC, and DHHS requirements. You will own the security architecture and risk mitigation lifecycle for on-premises and cloud infrastructures.

Responsibilities

• Manage and review RFPs, MOUs, and MOAs for privacy, security, Business Continuity Planning, and Disaster Recovery.
• Identify risks and develop mitigation strategies for existing and target architectures.
• Establish privacy and security architecture across networking, IAM, and Infrastructure as Code (IaC).
• Define and review Privacy and Security/Information Assurance requirements and dependencies.
• Develop vulnerability management processes, including asset management and threat protection.

Required Skills

• 7 years of experience in risk management and identifying mitigation strategies.
• 7 years of experience in NIST 800-53 and HIPAA assessments.
• 4 years of experience updating privacy and security policies based on assessment gaps.
• 4 years of hands-on penetration testing on enterprise web applications using Burp Suite, Metasploit, or WebInspect.
• 4 years of hands-on experience deploying workloads on AWS, GCP, or Azure.
• 3 years of experience implementing DevSecOps tools such as Fortify, CheckMarx, Contrast, or Imperva.
• 3 years of experience with vulnerability management using Qualys and Nessus.
• Knowledge of security architecture frameworks including TOGAF and MITA.
• Experience with application migration from on-premises to cloud IaaS, PaaS, and SaaS models.

Preferred Skills

• Familiarity with SOC2 Type 2, HITRUST, and MARSE.

Key Skills

Education

Any Graduate