Description

You will lead risk assessments, disaster recovery planning, and third-party vendor security reviews.

This role is on-site.

Responsibilities

• Conduct risk assessments and manage business continuity and disaster recovery plan execution.
• Scan agency assets using vulnerability management tools, perform data classification, and coordinate remediation with system owners.
• Monitor security alerts, respond to events or policy violations, and automate repeatable tasks for operational efficiency.
• Develop and maintain information security policies, procedures, and system security plans.
• Serve as the primary contact for internal and external auditors and manage audit findings.

Required Skills

• 10+ years of experience in information security, data analytics, and fraud prevention.
• Proficiency with Splunk and Microsoft Windows.
• Working knowledge of vulnerability scanning tools including Rapid7, Tenable, and Burp Suite.
• Working knowledge of NIST 800-53 frameworks.
• Experience managing third-party providers and conducting vendor security reviews.
• Proven experience training staff on security protocols and enforcing information security principles.

Preferred Skills

• Technical certifications such as ISC2 CISSP, ISC2 CGRC, or CompTIA CASP.
• Previous professional experience as an ISSO or BISO.
• Experience working within a financial organization.

Key Skills

Education

Any Gradute