You will manage information security posture, compliance standards, and risk mitigation strategies across the organization.
Responsibilities
Develop and implement information security policies, standards, and Standard Operating Procedures (SOP) in compliance with NIST SP 800-53 and federal requirements.
Prepare for and support security audits from agencies such as the IRS, SSA, OCSE, FBI, and SBBOA, including the remediation of findings.
Interface with users to assess security needs, implement protective procedures, and provide necessary security training.
Monitor security and confidentiality conditions, recommending safeguards for new and legacy information technology systems.
Perform periodic audits to ensure security policies are effective and propose enhancements to security management software.
Stay current on changes to laws affecting privacy, network security, cloud security, and remote access.
Required Skills
Thorough knowledge of information security management tools, policies, and procedures.
Deep understanding of state and federal legislation and regulatory laws regarding system security and privacy.
Expertise in software vulnerabilities, vulnerability scanning tools, and remediation processes.
Practical knowledge of network security, cloud security, and application security.
Familiarity with domain structures, user authentication, and digital signatures.
Ability to apply complex computer logic to security workflows.
Strong communication skills for technical reporting and interacting with systems administrators and management.
Experience assessing team security needs and conducting training.