Information System Security Specialist – IV

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and implement cybersecurity maturity evaluations for client organizations and agencies.

• Perform stakeholder interviews, facilitate workshops, and conduct evidence collection activities.

• Analyze and delineate security requirements concerning Multilevel Security (MLS) issues.

• Review cybersecurity programs against frameworks such as NIST CSF, NIST SP 800-53, NIST SP 800-171, and other relevant standards.

• Assess organizational capabilities utilizing maturity-based evaluation methodologies.

• Identify gaps in cybersecurity, potential risks, and opportunities for enhancement.

• Produce comprehensive assessment reports, executive summaries, and recommendations for corrective actions.

• Present assessment outcomes to executive leadership and technical stakeholders.

• Assist in the creation of cybersecurity dashboards, metrics, and reporting tools.

• Document assessment findings within governance, risk, and compliance (GRC) systems.

• Ensure the quality, consistency, and thoroughness of assessment deliverables.

• Adhere to applicable security, privacy, and data protection regulations.

• Collaborate with client Information Security Officers (ISOs), project teams, and program leadership throughout the assessment process.

⛳️ Requirements

• A Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.

• At least five (5) years of experience in conducting cybersecurity assessments, audits, risk assessments, or security consulting projects.

• Proven experience in applying the NIST Cybersecurity Framework and associated cybersecurity standards.

• Experience in conducting interviews, gathering evidence, and formulating assessment findings.

• Excellent technical writing and presentation abilities.

• Experience in preparing reports and recommendations for executive-level audiences.

• Proficient in Microsoft Office Suite and cybersecurity reporting tools.

• Preferred: CISSP, CISM, CISA, CRISC, GSLC, or equivalent cybersecurity certification.

• Preferred: Experience with ServiceNow GRC or other governance and compliance solutions.

• Preferred: Experience working with state, local, or federal government clients.

• Preferred: Knowledge of cybersecurity capability maturity models and risk management frameworks.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with company matching.

• Opportunities for professional development and continuing education.

• Flexible work arrangements and a supportive work environment.