Description

Lead risk assessments and technical security consultations for enterprise environments.

This role is on-site.

Responsibilities

• Consult on multiple projects to recommend security best practices and develop hardening guides.
• Review and evaluate technical solutions against relevant risk frameworks and regulations.
• Provide information security policy, process, and application consulting to the Information Security Office.
• Assist with PCI-DSS compliance activities and complete required NC DIIT documentation including PTA and VRAR.
• Prepare reports and presentations for senior management regarding project security status and recommendations.

Required Skills

• 5+ years of progressive experience as an IT information security professional in an enterprise environment.
• Hands-on experience implementing and operating firewalls, IDS/IPS, SIEM, and network traffic capture/analysis.
• Expert knowledge of NIST 800-53 and performing risk assessments utilizing this framework.
• Extensive experience with FISMA, OWASP, FedRAMP, and PCI-DSS.
• Experience implementing and operating enterprise-class server, storage, and data networking solutions.
• Experience documenting compliance with the North Carolina DIT Statewide Information Security Manual.
• Familiarity with the Department of Homeland Security (DHS) Cyber Security Evaluation Tool (CSET).
• Ability to interface with IT and business leaders to drive security initiatives.

Preferred Skills

• Familiarity with IT architecture frameworks such as SABSA and TOGAF.

Key Skills

Education

Any Graduate