Cybersecurity Specialist

R.E. Darling Co., Inc.; Tucson (AZ); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental and Vision

401K with company match

9/80 Schedule (Off every other Friday)

NOI (Quarterly Profit sharing)

Job summary

R.E. Darling Co., Inc. seeks a cybersecurity governance professional to lead CMMC and NIST 800-171 compliance, develop and audit security policies, and train staff.

This on-site role in Tucson offers hybrid remote work with a focus on risk management, policy enforcement, and incident response coordination. Qualifications include a bachelor’s in a cybersecurity field and 3+ years of threat monitoring, policy implementation, and security training.

Qualifications

• Bachelor degree in Computer Sciences, Information Systems or a cybersecurity program.
• Minimum three years of experience in monitoring and remediating cyber threats.
• Experience implementing corporate policies and training employees on security.
• Knowledge of NIST 800-171 and CMMC compliance preferred.

Responsibilities

• Provide governance to ensure compliance with legal and regulatory requirements including customer requirements.
• Implement and retain IT policies, processes, and systems for CMMC and NIST 800-171.
• Develop and implement processes to support regulatory and customer dictated security requirements.
• Audit departments and users for compliance and maintain SSP and related policies.
• Train users on revised security policies and awareness.
• Maintain disaster recovery and business continuity planning.
• Monitor endpoints for suspicious activity and remediate threats timely.
• Collaborate with IT leadership to ensure data backup and security planning are current.

Skills

Organizational skills

Analytical skills

Attention to detail

Communication skills

Regulatory compliance knowledge

Education

Bachelor degree in Computer Sciences / Information Systems or cybersecurity program

Tools

Windows Server administration

Office 365 & Exchange administration

Job description

Essential Functions

• Provide governance to ensure compliance to legal and regulatory requirements including dictated customer requirements.
  • Implementation, and retention of IT policies, processes and systems required to satisfy CMMC (including NIST 800-171) compliance
  • Collaborate with business units to develop and implement processes & procedures to support regulatory and customer dictated security requirements.
  • Provide evidence/supporting documents to attest to individual requirements of CMMC and NIST 800-171
  • Provide data required for Supplier Performance Risk System (SPRS)
  • Review and update System Security Plan (SSP) to reflect current requirements
  • Review and update Plan of Action and Milestones (POAM) to reflect current status for meeting/retaining CMMC certification
  • Work with CMMC Ecosystem Resources to attain/retain CMMC certification
• Cybersecurity Maturity Model Certification (CMMC) and NIST 800-171 Compliance & Governance
• Monitoring of CMMC related FAR/DFAR clauses
• Develop and execute process to Audit departments and users for compliance
• Maintain and update REDAR’s System Security Policy (SSP) and related security policies
• Change agent for updating, communicating and training users to revised requirements for the SSP and related policies
• Cyber Security/Disaster Recovery and Business Continuity Planning
• Employ best practices for security with least level of access required
• Stay abreast of current and trending threats by attending training, conferences and trade shows, etc.
• Retain External Services for Cybersecurity
• Routinely review monitoring notifications from External Service providers (as applicable) to review current Cyber Intel
• Collaborate with Information Technology & Systems Manager to implement and support requirements for qualification of Cybersecurity Insurance
• Collaborate with Information Technology & Systems Manager and Technical Support Manager to implement proactive solutions to prevent against new threats as they become known
• Oversee and direct company communication and education to provide user awareness of ongoing threats and risks
• Ensure that system patches/updates to operating systems & clients are implemented
• Collaborate with Information Technology & Systems Manager to ensure company data Backup, Disaster Recovery and Business Continuity Plan are current and documented
• Oversee user access security policy
• Collaborate with Technical Support Manager to develop and oversee appropriate security procedures to safeguard the system from physical harm and viruses, unauthorized users and damage to data
• Provide Cyber Security, Controlled Unclassified Information (CUI), Risk Awareness and IT policy training
  • Onboarding
  • Annual
• Develop and maintain training media for cyber security requirements, CUI and risk awareness
• Train employees in cyber security requirements, CUI, risk awareness and company security policies
• Ongoing current cyber threat awareness training
• Ongoing training on revisions to REDAR’s Information Systems Security Policy (ISS) and related policies
• Actively monitor endpoints for suspicious activity
• Respond and take action to remediate threats in a timely manner
• Work with contracted External Cybersecurity providers as required
• Work with Technical Support Manager and technical team as required
• Monitor and address current trends in cyber security requirements
• Monitor appropriate security procedures to safeguard the system from physical harm and viruses, unauthorized users and damage to data
• Current awareness of upcoming security and compliance requirements relating to NIST 800-171 and CMMC

Competencies (Knowledge, Skills, Abilities)

This position requires strong organizational skills, analytical skills, a high level of attention to detail and knowledge of current requirements for compliance. Good communications skills are required with the ability to work with all levels of the organization diplomatically and skillfully.

Supervisory Responsibilities

This position works under minimal supervision. Assignments are received in the form of results expected, due dates and general procedures to follow. This position has no supervisory responsibilities.

Standard climate-controlled office environment with moderate noise from computers, printers, and light foot traffic. Occasional exposure to varying temperatures, loud machinery, moving mechanical parts, and airborne particles.

Position Type and Expected Hours of Work

Regular full-time position expected to work an average of 40 hours per week throughout the course of the year. Core hours are a 9/80 schedule; Monday-Thursday, 7:00 AM to 4:30 PM. Working Fridays - 7:00 AM to 3:30 PM. Every other Friday - off. You will be expected to be on call outside of core hours as the primary contact for cyber incident responses.

Travel

This position requires an on-site presence at our Tucson, AZ office, and has minimal travel requirements. This position is eligible for a hybrid remote work schedule with the expectation of being in office 2x per week.

Required Education, Experience, Certification

• Bachelor degree in Computer Sciences, Information Systems or a specialized cybersecurity program, which will provide foundational knowledge in network security, risk management, cryptography, and threat detection
• Minimum three years’ experience in the following areas
• Monitoring and remediating Cyber Security threats
• Implementation and retention of Corporate policies
• Training employees on Cyber Security policies and awareness
• Windows server administration
• Microsoft Office 365 & Exchange administration
• Previous experience with NIST 800-171 compliance (or equivalent) required
• Previous employment with a Department of Defense Contractor preferred

Company Benefits and Perks:

We work hard to embrace diversity and inclusion and encourage everyone at REDAR to bring their authentic selves to work every day. We participate in multiple community programs, flexible work hours, and family-friendly benefits to all of our employees.

• Medical, Dental and Vision
• Paid Time Off
• 401K with company match
• 9/80 Schedule (Off every other Friday)
• NOI (Quarterly Profit sharing)

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.