Business IT Security Officer

Techead; Richmond (VA); Remote; USD 76,000 - 90,000; Full time

Job summary

TECHEAD is seeking a Business IT Security Officer for a remote, 1-year contract to strengthen cybersecurity across the enterprise. You will conduct risk assessments, oversee cyber services, and brief executives on threats and risk mitigation. Strong knowledge of NIST, CIS, OWASP and cloud/security controls is required.

Ideal candidates hold 8+ years in IT with 5+ years in risk/security, plus relevant certifications. The role offers a remote arrangement and a pay rate of $55–$65 per hour.

Qualifications

• Bachelor’s degree or higher in a technical field.
• 8+ years IT experience with 5+ years in IT risk or information security.
• Broad knowledge of IT technologies and security controls.

Responsibilities

• Conduct risk assessments and mitigation strategies to strengthen cybersecurity posture.
• Oversee cyber services delivery and improve risk understanding across the enterprise.
• Brief executives on cybersecurity threats, initiatives, and open risks.

Skills

IT risk management

IT security

SaaS integration

Azure cloud

PCI DSS

NIST framework

Security governance

Strong communication

Education

Bachelor's degree in Computer Science/Information Systems/Engineering

Job description

TECHEAD is celebrating over thirty-five years of incredible heritage, talent, and accomplishments! To learn more about TECHEAD, visit us at TECHEAD.com or on Glassdoor.

Business IT Security Officer

Remote

1 Year Contract

Pay Rate: $55/hr -$65/hr

Responsibilities:

• Completing comprehensive risk assessment and mitigation strategies crafted to improve the overall cybersecurity posture of the company.
• Overseeing the delivery of cyber service(s) to improve risk understanding and cyber-strategies across the enterprise.
• Briefing business executives on cybersecurity threats, initiatives and open risks and being a liaison to capture information on technology strategies within support business lines.
• Interpreting information security policies, standards (i.e. NIST, CIS, OWASP, etc.), and other requirements with respect to specific internal information systems and assisting with the implementation of these and other information security requirements.
• Providing business and technical advice on a wide variety of IT risk issues, concerns, problems, and projects ensuring all business processes incorporate adequate information security - including support of security considerations of projects undergoing Architectural Review Board consideration.
• Developing and communicating security and compliance requirements to technology and system owners and key business partners
• Providing users and management with security mentorship with regards to selecting technology products, as well as ongoing integrations and improvements of such products
• Assessing and qualifying risk related to third party service providers and supporting the Supplier Risk Management program, including driving remediation of findings and supporting contract negotiations.
• Providing support and escalation for the Threat and Vulnerability Management program, including web application security, in‑house IT environments and cloud‑based infrastructure, including driving risk insights via reporting in support of effective vulnerability management.
• Serving as a technical lead for the BISOs for periodic information system and application risk assessments, including those associated with the development of new or significantly improved business applications.
• Providing support for internal security assessments and corporate audit assessments, including active engagement in high‑risk auditable areas, risk management and remediation of audit findings, and ongoing information security governance.
• Serving as the SME for technology operating in the supported business lines, establishing strong working relationships with IT professionals supporting those systems, and supporting effective incident response in conjunction with Altria’s internal Computer Security Incident Response Team (CSIRT) by actively participating in and providing consultation during response activities.
• Compliance experience

Must‑Have Requirements

• Bachelor's degree in Computer Science, Information Systems, Engineering or related subject area
• 8 years of IT experience with 5+ years in an IT risk or information security role.
• Broad knowledge of IT technologies, operating systems, application platforms and emerging technology.
• Detailed understanding of IT information security fundamentals, risk assessment and risk management fundamentals, defense-in-depth practices, modern networking technologies and IT security controls.
• Experience with security implications as it relates to:
• Software as a Service (SaaS) integration, including but not limited to SalesForce.com
• Website integration and improvement
• Azure cloud integration
• eCommerce
• Payment Card Industry Data Security Standard (PCI DSS) compliance
• NIST security controls frameworks, including the NIST Cyber Security Framework
• Excellent verbal and written communication interpersonal skills.
• Certified Information System Security Professional (CISSP), Certified Information System Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or similar certification desired.

TECHEAD's mission is to make our associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won't strive for anything less.

TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing non‑discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

For more information on TECHEAD please visit www.techead.com.