Job Description

• Experience implementing large-scale compliance programs such as ISO 27001:2013.

• Expert knowledge of security and privacy standards and frameworks including NIST 800-53, ISO 27001, GDPR, CCPA/CPRA.

• Preferred certifications: CISSP, GIAC, or similar professional security certifications.

• Ability to represent cyber security posture to the organization and address inquiries and assessments.

• Proficiency in recommending cyber security technologies and assessing vulnerabilities.

• Understanding of vulnerability management and incident management processes at an enterprise scale.

• Familiarity with cyber threat mitigation techniques and security technologies, including emerging trends.

• Excellent interpersonal skills for effective communication with customers, employees, management, and security personnel.

• Strong analytical, judgment, initiative, and execution skills.

Job Responsibilities

Support the implementation of client’s Cybersecurity Best Practices and security requirements.

• Provide subject matter expertise in scoping and architecture of security initiatives, including analysis and implementation.

• Support the security efforts within development environments and solutions (including secure development practices).

• Implement technical solutions to ensure the overall security of the End-2-End development processes.

Support client’s Cyber Security Operations

• Identify and Report IT risk and vulnerabilities, as well as vendor risk.

• Participate in incident response and forensic activities.

• Stay updated on technology vulnerabilities and best practices.

• Participate in Threat Hunting and mitigation activities