Security Data Specialist

Position Overview

Creative Visions is seeking a Security Data Specialist to support a large-scale cybersecurity assessment program for State government agencies. This role is critical in transforming cybersecurity assessment data into actionable insights, supporting enterprise risk management, and enabling data-driven decision-making across stakeholders.

The ideal candidate combines cybersecurity knowledge, data analysis skills, and experience with GRC platforms and reporting tools to support assessment lifecycle activities, reporting dashboards, and remediation tracking.

Key Responsibilities

Cybersecurity Data Analysis & Management

• Analyze cybersecurity assessment data aligned to frameworks such as NIST CSF, NIST 800-53, and NIST 800-171
• Interpret maturity scores (CMMI 0–5 scale) and identify trends, risks, and control gaps
• Ensure accuracy, completeness, and consistency of cybersecurity data outputs

GRC Platform Support (ServiceNow or Similar)

• Input, manage, and validate assessment data within GRC platforms (e.g., ServiceNow GRC)
• Support POA&M (Plan of Action & Milestones) development and tracking
• Ensure proper structuring of findings, risks, and remediation actions for downstream use

Dashboarding & Reporting

• Develop and maintain interactive dashboards displaying:
  • Maturity scores across NIST CSF domains
  • Top risks, findings, and issues
  • Agency-level and statewide comparisons
• Support real-time reporting and data visualization for stakeholders
• Generate executive-level reports and analytics to support decision-making

Data Integration & Quality Assurance

• Ensure compatibility of assessment data with State systems and reporting requirements
• Validate data accuracy and support QA processes for reporting deliverables
• Assist in maintaining standardized data formats and reporting templates

Collaboration & Stakeholder Support

• Work closely with cybersecurity analysts, auditors, engineers, and project leadership
• Support coordination with agency stakeholders and Information Security Officers (ISOs)
• Provide data insights to inform remediation prioritization and risk decisions

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Data Analytics, or related field (or equivalent experience)
• 3 years of experience in cybersecurity data analysis, IT systems analysis, or related role
• Experience working with:
  • Cybersecurity frameworks (NIST CSF, NIST 800-53, etc.)
  • Data analysis and reporting tools (Excel, Power BI, Tableau, etc.)
• Familiarity with GRC platforms (ServiceNow preferred)
• Strong analytical, problem-solving, and organizational skills

Preferred Qualifications

• Experience supporting cybersecurity assessments or audits
• Knowledge of CMMI maturity models
• Experience building dashboards with drill-down and filtering capabilities
• Familiarity with state or federal cybersecurity environments
• Certifications such as:
  • Security
  • CISSP (or working toward)
  • CISA or similar