Must Haves:
5+ years experience
Develops and implements cyber security strategy program and architecture
Experience with Control Testing and Assurance
Experience with Audit against NIST, CIS and ISO framework
Experience with implementing Risk Management Framework NIST RMF
Implements new cyber security solutions and technologies
Description
- Develops and implements cyber security strategy and architecture
- Designs and maintains security controls and processes to protect systems, networks and data
- Reviews system security measures, and recommends and implements enhancements
- Collaborates with other Information and Communication Technology and business departments to align security measures with security standards, policies and regulations
- Stays updated on cyber security threats, and recommends new security technology and strategy improvements
- Implements new cyber security solutions and technologies
- Provides guidance to IT staff on security best practices
- Develops and maintains cyber security reference architecture for consistent security controls
- Implements incident response and disaster recovery plans
- Business continuity planning, contingency planning, disaster recovery planning, incident and response, business impact analysis, risk management methodologies including data center and application contingency testing to apply concepts in support of all organizational initiatives.
- Experience with Control Testing and Assurance
- Experience with Audit against NIST, CIS and ISO framework
- Experience with implementing Risk Management Framework NIST RMF
- Deliverables
- Implement Data Loss Prevention (DLP)
- Develop Cybersecurity Program
- Launch Security Awareness Program
- Deploy Microsoft Defender
- Implement Security Awareness and Training Program
Additional Terms
- Certifications: CISM, CRISC
- Bachelors in Computer Engineering, Computer Science or IT
- 5+ years of experience