Security Specialist

This is a fully remote position, open to applicants in North Carolina, +1 more state.

📋 Description

• Conduct an annual third-party risk assessment (TPA) for a vendor involved in technical implementations.

• Collaborate with a lead analyst to carry out the assessment.

• Take ownership of the delivery of the System and Data Inventory.

• Manage the delivery of a Risk Registry.

• Oversee the delivery of the Risk Assessment Report (RAR).

• Assess vendor evidence and provide constructive feedback.

• Prioritize and summarize the status of risk assessments for project managers and executive leadership.

⛳️ Requirements

• A minimum of 5 years of comprehensive knowledge of mainstream operating systems and security technologies, encompassing network security appliances, identity and access management, and cryptography.

• At least 3 years of practical experience in the IT security sector and familiarity with federal and state regulations.

• Profound understanding of NIST SP 800-53, SP 800-30, and SP 800-37.

• A minimum of 3 years of strong capability in conducting vendor interviews, evaluating evidence, and providing feedback to vendors.

• At least 3 years of experience in prioritizing and summarizing risk assessment statuses for project managers and executive leadership.

• Bachelor’s degree in Computer Science or a related IT field from an accredited institution, along with two years of progressive experience in IT Security or a related field; OR an Associate degree in Computer Science or a related IT field with three years of progressive experience; OR an equivalent combination of education and experience.

• Professional certifications such as CISSP or CISM are preferred.

• Experience in conducting NIST 800-53 based risk assessments.

• Familiarity with the NIST Cybersecurity Framework (CSF) and Privacy Framework.

• Preferred: Experience in completing HITRUST risk assessments.

🏝️ Benefits

• Flexible remote work schedule.