Description

You will manage security and compliance programs across IT and OT environments, including risk assessments, threat triage, and policy alignment.

Responsibilities

• Implement information security and compliance programs for IT and OT systems.
• Conduct written risk assessments for existing and new systems, solutions, and services.
• Triage security threats and develop mitigation plans to resolve risks to business systems.
• Evaluate commercial off-the-shelf and custom developed systems for alignment with IT and OT security policies.
• Monitor industry trends, tools, and techniques to maintain security posture.

Required Skills

• 5+ years implementing information security and compliance programs for IT and OT systems.
• 5 years conducting written risk assessments using NIST, CIS Critical Controls, or ISO 27001.
• 4 years triaging security threats and determining mitigation plans.
• 4 years evaluating business systems for policy alignment.
• 3 years securing cloud environments.
• 3 years conducting security analysis using Secure System Development LifeCycle (SSDLC).
• Bachelor's Degree in Information Security, Computer Science, Cybersecurity, or a related field.
• Relevant certifications such as GSEC, GOCSP, CGEIT, CISA, CRISC, GCCC, Security+, Network+, CCSP, or CSSLP.

Key Skills

Education

Bachelor's Degree