Cybersecurity Specialist

R.E. Darling; Tucson (AZ); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental and Vision

401K with company match

9/80 Schedule (Off every other Friday)

NOI (Quarterly Profit sharing)

Job summary

R.E. Darling’s Tucson, AZ office is seeking a Security Program Manager to enforce governance across security planning, compliance evidence, and training efforts. You will coordinate activities tied to CMMC and NIST 800-171, partnering with internal teams and external providers to maintain an up-to-date security posture.

The role focuses on implementing IT policies to satisfy CMMC (incl. NIST 800-171) compliance, maintaining SSP and POAM, and coordinating annual attestations.

Qualifications

• Bachelor degree in Computer Sciences, Information Systems, or a specialized cybersecurity program.
• Minimum three years’ experience in monitoring and remediating cyber security threats.
• Minimum three years’ experience in implementation and retention of corporate policies.
• Minimum three years’ experience in training employees on cyber security policies and awareness.
• Minimum three years’ experience in Windows server administration.
• Minimum three years’ experience in Microsoft Entra ID administration.
• Minimum three years’ experience in Microsoft Office 365 & Exchange administration.
• Previous experience with NIST 800-171 compliance (or equivalent) required.
• Previous employment with a Department of Defense Contractor preferred.

Responsibilities

• Enforce governance to REDAR’s System Security Plan (SSP) and security policies, including auditing departments and processes for compliance to company security policies.
• Monitor and address current trends in cyber security requirements, including NIST 800-171 and CMMC updates.
• Provide user training for the System Security Plan and related policies, including Cyber Security training and Cyber Risk Awareness training, and maintain training media for cyber security, CUI, and risk awareness.
• Coordinate annual attestation and gather evidence/supporting documents for required controls under CMMC and NIST 800-171.
• Work with third‑party and external security services as required, including routinely reviewing monitoring notifications for cyber intelligence (as applicable).
• Provide governance to ensure compliance with legal and regulatory requirements, including customer dictated requirements, and monitor relevant FAR/DFAR clauses.
• Implement, retain, and oversee IT policies, processes, and systems required to satisfy CMMC (including NIST 800-171) compliance.
• Collaborate with business units to develop and implement processes and procedures supporting regulatory and customer security requirements.
• Review and update the SSP and the Plan of Action and Milestones (POAM) to reflect current status for meeting and retaining CMMC certification.
• Support SP RS data needs and follow up on supplier/vendor compliance questionnaires.
• Maintain and update security documentation, including the System Security Policy (SSP) and related security policies.
• Serve as a change agent for updating, communicating, and training users to revised SSP and related policy requirements.
• Support cyber security and resilience activities, including cyber security/disaster recovery and business continuity planning; ensure patches and updates to operating systems and clients are implemented; and ensure data backup, disaster recovery, and business continuity plans are current and documented.
• Oversee user access security policy, safeguard systems from physical harm and viruses, and coordinate appropriate security procedures with the technical team.
• Retain and support incident response plan activities and respond to and remediate threats in a timely manner.
• Actively monitor endpoints for suspicious activity, provide ongoing cyber threat awareness training, and deliver ongoing training on revisions to the REDAR Information Systems Security Policy (ISS) and related policies.
• Collaborate with the Information Technology and Systems Manager to support requirements for qualification of cybersecurity insurance.
• Collaborate with technical leadership to implement proactive solutions to prevent threats as they become known.

Skills

Cybersecurity monitoring

Threat remediation

Policy implementation

Security training

Incident response

Hybrid work coordination

Education

Bachelor degree in Computer Sciences

Bachelor degree in Information Systems

Specialized cybersecurity program

Tools

Windows Server administration

Microsoft Entra ID administration

Microsoft Office 365 & Exchange administration

Job description

R.E. Darling is building a security program that’s practical, auditable, and aligned to customer and regulatory expectations. This hybrid role in Tucson, AZ supports a culture of diversity and inclusion, with benefits that help you stay healthy and plan ahead.

You will enforce and maintain governance across the organization’s security planning, compliance evidence, and training efforts. You will also coordinate key activities tied to CMMC and NIST 800-171, while partnering with internal teams and external providers to keep the security posture current.

Responsibilities

• Enforce governance to REDAR’s System Security Plan (SSP) and security policies, including auditing departments and processes for compliance to company security policies.
• Monitor and address current trends in cyber security requirements, including NIST 800-171 and CMMC updates.
• Provide user training for the System Security Plan and related policies, including Cyber Security training and Cyber Risk Awareness training, and maintain training media for cyber security, CUI, and risk awareness.
• Coordinate annual attestation and gather evidence/supporting documents for required controls under CMMC and NIST 800-171.
• Work with third‑party and external security services as required, including routinely reviewing monitoring notifications for cyber intelligence (as applicable).
• Provide governance to ensure compliance with legal and regulatory requirements, including customer dictated requirements, and monitor relevant FAR/DFAR clauses.
• Implement, retain, and oversee IT policies, processes, and systems required to satisfy CMMC (including NIST 800-171) compliance.
• Collaborate with business units to develop and implement processes and procedures supporting regulatory and customer security requirements.
• Review and update the SSP and the Plan of Action and Milestones (POAM) to reflect current status for meeting and retaining CMMC certification.
• Support Supplier Performance Risk System (SPRS) data needs and follow up on supplier/vendor compliance questionnaires.
• Maintain and update security documentation, including the System Security Policy (SSP) and related security policies.
• Serve as a change agent for updating, communicating, and training users to revised SSP and related policy requirements.
• Support cyber security and resilience activities, including cyber security/disaster recovery and business continuity planning; ensure patches and updates to operating systems and clients are implemented; and ensure data backup, disaster recovery, and business continuity plans are current and documented.
• Oversee user access security policy, safeguard systems from physical harm and viruses, and coordinate appropriate security procedures with the technical team.
• Retain and support incident response plan activities and respond to and remediate threats in a timely manner.
• Actively monitor endpoints for suspicious activity, provide ongoing cyber threat awareness training, and deliver ongoing training on revisions to the REDAR Information Systems Security Policy (ISS) and related policies.
• Collaborate with the Information Technology and Systems Manager to support requirements for qualification of cybersecurity insurance.
• Collaborate with technical leadership to implement proactive solutions to prevent threats as they become known.

Requirements

• Bachelor degree in Computer Sciences, Information Systems, or a specialized cybersecurity program.
• Minimum three years’ experience in monitoring and remediating cyber security threats.
• Minimum three years’ experience in implementation and retention of corporate policies.
• Minimum three years’ experience in training employees on cyber security policies and awareness.
• Minimum three years’ experience in Windows server administration.
• Minimum three years’ experience in Microsoft Entra ID administration.
• Minimum three years’ experience in Microsoft Office 365 & Exchange administration.
• Previous experience with NIST 800-171 compliance (or equivalent) required.
• Previous employment with a Department of Defense Contractor preferred.

Technologies

• CMMC, NIST 800-171, SPRS, SSP, POAM
• FAR, DFAR
• Microsoft Entra ID, Microsoft Office 365, Exchange
• Windows server
• Controlled Unclassified Information (CUI)

Benefits

• Medical, Dental and Vision
• Paid Time Off
• 401K with company match
• 9/80 Schedule (Off every other Friday)
• NOI (Quarterly Profit sharing)

Work Schedule, Travel, and Work Model

• Regular full‑time role with an average of 40 hours per week.
• Core hours follow a 9/80 schedule: Monday–Thursday, 7:00 AM to 4:30 PM; Fridays 7:00 AM to 3:30 PM; off every other Friday.
• Expected to be on call outside of core hours as the primary contact for cyber incident responses.
• Requires on‑site presence at the Tucson, AZ office with minimal travel; eligible for hybrid work with in‑office 2x per week.

Work Environment

• Standard climate‑controlled office environment with moderate noise from computers, printers, and light foot traffic.
• Occasional exposure to varying temperatures, loud machinery, moving mechanical parts, and airborne particles.

REDAR encourages employees to bring their authentic selves to work and participates in community programs, offers flexible work hours, and provides family-friendly benefits.