Cyber Security Engineer

Trinity Global Consulting; Springfield (VA); On-site; USD 90,000 - 110,000; Full time

Job summary

Trinity Global Consulting is seeking a Senior IT Security Manager to oversee outsourced SOC relationships and drive the company’s security program. You will ensure risk management methodologies, security products, and technologies protect systems and information.

The role requires a Bachelor's degree in IT and 5+ years in IT risk management, with strong knowledge of controls, regulatory requirements, and secure coding practices.

Qualifications

• Bachelor's degree in information technology or equivalent and 5+ years IT risk management experience.
• Good understanding of risk management principles, regulatory requirements, and industry best practices.
• Good understanding of IT controls and data privacy regulations.

Responsibilities

• Manage IT security and compliance programs with documented controls.
• Develop and report KPIs, metrics, dashboards for security posture.
• Collaborate across IT, security, and operations to implement controls.
• Apply RMF processes for A&A and continuous monitoring.

Skills

Analytical skills

English communication

IT risk management

Prioritization

Education

Bachelor's degree in information technology or equivalent

Job description

Senior IT Security Manager

The Senior IT Security Manager manages outsourced SOC, Artic Wolf Networks, and is the relationship owner for other outsourced/third party relationships relating to IT security. They will ensure appropriate application of risk management methodologies, security products, and technologies to protect the company's systems and information.

$100,000.00 yearly

Full-time

Remote

Essential duties and responsibilities include the following:

• Manages IT and company compliance issues. Produces detailed documentation including data flow diagrams, logical diagrams, and physical diagrams as required.
• Provides identity management and access control expertise for systems, networks, applications designs and architectures.
• Work across both Network, Infrastructure and Systems Administration functions to implement controls and best practices.
• Works as a liaison between IT and Operations Technology to ensure full and complete implementation of security controls, standards, and policies.
• Assists IT and Operations Technology with remediation planning and implementation.
• Establish and tests new and existing internal controls.
• Develop prioritized initiatives to address findings from both internal testing as well as from SOC.
• Work with Development to define and adhere to secure coding practices.
• Maintain all cybersecurity, IT Risk and Compliance, cyber insurance and other key documents (SSAE 16, SOC 1, WISP, Disaster Recovery, et. al.).
• Assists with development of the companys Asset Management processes and procedures.
• Creates KPIs, metrics, dashboards and reporting to measure the performance of the security organization.
• Commitment to safety begins with management. Managers and frontline supervisors are accountable for creating and maintaining a culture of Safety and assuring a safe work environment.

Apply RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoring. Develop, review, and maintain secu... Show more

Education and/or Experience

Bachelor's degree in information technology or equivalent plus 5+ years of related work experience with IT Risk Management, or an equivalent combination of education and work experience; Good understanding of risk management principles, regulatory requirements, and industry best practices; Good understanding of General IT Controls, and Data Privacy Regulations; previous auditor experience a plus; Good understanding of IT systems and controls including Web systems, e-commerce, data centers, network infrastructure, patching, access controls, databases, cloud systems etc.

Skills and abilities

• Analytical skills and the ability to organize work in a logical, thorough, and succinct manner.
• Flexibility to adapt to changing assignments and ability to effectively prioritize.
• Effective with written and verbal English communications at all levels, providing compliance guidance to project teams, management, and business partners.