What are the responsibilities and job description for the Cloud Cybersecurity SME position at North South Consulting Group, LLC?
North South Consulting Group is seeking a seasoned Cloud Cybersecurity Subject Matter Expert to lead cyber operations that safeguard the digital environment supporting the programs. This expert will shape security strategy, guide compliance, and respond to evolving cyber threats across a cloud-first architecture.
This is a remote position.
Key Responsibilities:
This is a remote position.
Key Responsibilities:
- Lead the development and enforcement of cybersecurity policies and controls
- Oversee risk assessments, compliance activities, and threat response
- Manage secure implementation and continuous monitoring in the cloud
- Provide multidisciplinary cybersecurity leadership and direction
- Must be a U.S. citizen
- Bachelor’s degree in computer science, IT, information systems, or a related field
- Minimum of 8 years of experience in managing cybersecurity projects of similar size and complexity to this requirement within a cloud environment
- Minimum of 8 years of experience with NIST RMF, NIST 800-53, STIGs, SCAP, IAVAs, and FISMA
- Possess one of the following certifications: CISM, Certified Information Systems Security Officer (CISSO), Federal IT Security Professional-Manager (FITSP-M), GIAC Certified Intrusion Analyst Certification (GCIA), GIAC Cloud Security Automation (GCSA), GIAC Certified Incident Handler (GCIH), GIAC Security Leadership Certification (GSLC), Global Industrial Cyber Security Professional Certification (GICSP), CISSP- Information Systems Security Management Professional (ISSMP), or CISSP
- Possess a Top Secret Clearance or the ability to obtain
- Minimum of 8 years of experience analyzing, assessing, and implementing corrective actions based on vulnerability management and penetration testing.
- Minimum of 8 years of experience supporting DoD defensive cyber operational activities, including, but not limited to, information system protection, defense, response (incident handling), reporting, and recovery
