Description

You will manage security policies, vulnerability assessments, and technical compliance across on-prem and cloud environments.

This role is on-site.

Responsibilities

• Execute security policies and controls while conducting vulnerability assessments.
• Analyze on-prem and cloud security operations in collaboration with DevSecOps teams.
• Orchestrate project lifecycle calls including kick-offs, critical finding notifications, and remediation reviews.
• Manage audit responses, evidence gathering, and the development of Corrective Action Plans.
• Investigate security violations and coordinate with technical teams to implement effective solutions.

Required Skills

• 5+ years of experience in information security and risk assessment.
• Extensive experience implementing NIST 800-37, NIST 800-53, and MARS-E controls.
• Proven expertise managing POA&Ms and developing Corrective Action Plans.
• Hands-on experience with Windows and Linux operating systems.
• Experience with DevSecOps workflows and security-related delivery activities.
• Knowledge of security web application firewalls and data/network security processing.
• Ability to develop and implement IT policies, standards, and security documentation.
• Experience managing security governance and security plan documents.
• Strong background in project management and resolving conflicts at managerial levels.

Preferred Skills

• Experience delivering technical training in cloud-based technology.

Key Skills

Education

Any Graduate