Contract - Senior Cyber Risk Engineer

Jobvertise.com - Jobboard; Springfield (IL); Remote; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Senior Cyber Risk Engineer to enhance their cyber risk management capabilities. This role involves conducting assessments, identifying gaps, and ensuring compliance with regulatory standards. The ideal candidate will leverage their extensive experience in cybersecurity and risk assessment to collaborate with various stakeholders and improve the organization's security posture. If you are passionate about cybersecurity and ready to make a significant impact, this opportunity is perfect for you.

Qualifications

• 5+ years of experience in cyber security and compliance.
• Proficient in NIST 800-53 and SOC 2 audits.

Responsibilities

• Conduct thorough assessments of cyber risk management capabilities.
• Identify gaps and provide recommendations for improvement.
• Develop detailed reports on assessment findings.

Skills

Cybersecurity

Compliance

Cyber Risk Assessment

Security Auditing

NIST 800-53

SOC 2 Audits

Cloud Risk Management (Azure, Oracle)

DevOps

ITIL

Education

Bachelor's degree in Cybersecurity

Certifications (CISSP, CISA, etc.)

Job description

Contract - Senior Cyber Risk Engineer

Rate: Open

Location: Remote

Duration: 1 year

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Certifications (Preferred): CISSP, CISA, CISM, CRISC, CAP, Security+, or equivalent.
• 5+ years of experience in cyber security, compliance, cyber risk assessment, or security auditing.
• Working knowledge of NIST 800-53.
• Proficient in supporting the performance of SOC 2 audits by external auditors and prepare materials to support attestations with NAIC model laws and NYDFS.
• Cloud-based cyber risk management controls (Azure and/or Oracle Cloud Infrastructure).
• Technology management methodologies (DevOps, SAFe, ITIL).
• Proficiency in multiple cyber risk management domains.
• Understanding of cyber risk management oversight and administration processes, security architecture, technical security controls, and data protection strategies.

Responsibilities

• Cyber Risk Management Capability Assessments: Conduct thorough assessments of the effectiveness of cyber risk management capabilities within the organization.
• Gap Analysis: Identify gaps in cyber risk management capability effectiveness and provide recommendations for enhancing the organization's cyber risk management posture.
• Issue Management & POAM: Manage issues and develop Plan of Action and Milestones (POAM) to address identified gaps and vulnerabilities.
• Documentation & Reporting: Develop detailed reports and documentation on assessment findings, remediation plans, and effective metrics.
• Stakeholder Collaboration: Work closely with cyber risk management, technology, and business partners to ensure that cyber risk management capabilities are effective.
• Compliance, Standards, and Regulatory Alignment: Ensure adherence to regulatory and industry standard requirements such as NIST 800-53, SOC 2, 23 NYCRR 500, NAIC Model Law, and HIPAA. As regulations and standards are introduced and updated, assist in enhancing and extending the framework.