Information Assurance Engineer - IE4619

generalwebers; Baltimore (MD); Hybrid; USD 87,000 - 113,000; Full time

Benefits offered by this job

Professional development programs

Certification support

Remote or hybrid work options

Job summary

GeneralWebers is seeking an experienced Information Assurance Engineer (IE4619) for a full-time contract role in the United States. You will protect information systems, assess risks, implement controls, and support compliance across IT, cybersecurity, and business teams.

Requirements include a Bachelor's in IT/cybersecurity or related field and 3+ years in information assurance or a related technical role. Remote or hybrid options may be available depending on organizational needs.

Qualifications

• Bachelor's degree in IT, cybersecurity, CS, information assurance, information systems, or related field.
• 3+ years in information assurance, cybersecurity, information security, or related technical role.
• Strong understanding of cybersecurity principles, risk management, vulnerability assessment, access controls, network security, and data protection.
• Experience with security frameworks and standards such as NIST, ISO 27001, CIS Controls, or similar.

Responsibilities

• Assess information systems, networks, applications, and infrastructure to identify vulnerabilities and risks.
• Develop, implement, and maintain information assurance policies, procedures, standards, and security controls.
• Conduct security assessments, risk analyses, vulnerability reviews, and compliance evaluations.
• Monitor security controls and configurations to identify weaknesses and incidents.
• Support incident response activities including investigation and remediation.
• Collaborate with IT, cybersecurity, compliance, and business teams on security requirements.
• Maintain security documentation, risk registers, assessment reports, and system security plans.
• Support vulnerability management, security testing, remediation tracking, and continuous improvements.
• Evaluate proposed technologies for security and compliance requirements.
• Assist audits and ensure alignment with security frameworks and organizational requirements.

Skills

Cybersecurity fundamentals

Risk assessment

Vulnerability management

Access controls

Network security

Data protection

Analytical skills

Communication

Independent work

Education

Bachelor's degree in IT, cybersecurity, CS, information assurance, or related field

Tools

Microsoft Office

Security/GRC platforms

Job description

About the job Information Assurance Engineer - IE4619

We are seeking an experienced Information Assurance Engineer (IE4619) to join our team on a full-time contract basis. The Information Assurance Engineer will be responsible for protecting organizational information systems, assessing security risks, implementing security controls, supporting compliance initiatives, and helping ensure the confidentiality, integrity, and availability of critical systems and data.

Key Responsibilities:

Assess information systems, networks, applications, and infrastructure to identify security vulnerabilities and potential risks.

Develop, implement, and maintain information assurance policies, procedures, standards, and security controls.

Conduct security assessments, risk analyses, vulnerability reviews, and compliance evaluations.

Monitor security controls and system configurations to identify weaknesses, anomalies, and potential security incidents.

Support incident response activities, including investigation, documentation, remediation, and follow-up.

Collaborate with information technology, cybersecurity, compliance, and business teams to address security requirements.

Maintain security documentation, risk registers, assessment reports, system security plans, and compliance records.

Support vulnerability management, security testing, remediation tracking, and continuous security improvements.

Evaluate proposed technologies, applications, and system changes for security and compliance requirements.

Assist with audits and ensure systems remain aligned with applicable security frameworks, policies, and organizational requirements.

Develop and communicate recommendations for reducing information security risks and improving the organization's security posture.

Support access control, authentication, authorization, and data protection initiatives.

Monitor emerging cybersecurity threats, vulnerabilities, and industry best practices.

Provide technical guidance to stakeholders regarding information assurance and security requirements.

Contribute to business continuity, disaster recovery, and system resilience initiatives.

Qualifications:

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Assurance, Information Systems, or a related field.

3+ years of experience in information assurance, cybersecurity, information security, systems security, risk management, or a related technical role.

Strong understanding of cybersecurity principles, risk management, vulnerability assessment, access controls, network security, and data protection.

Experience with security frameworks and standards such as NIST, ISO 27001, CIS Controls, or similar frameworks.

Experience conducting security assessments, risk analyses, vulnerability reviews, and compliance activities.

Familiarity with security monitoring, vulnerability management, incident response, and security documentation processes.

Proficiency with Microsoft Office and security, compliance, ticketing, or governance platforms.

Strong analytical, organizational, communication, and problem-solving skills.

Ability to manage multiple security initiatives and priorities while meeting deadlines.

Strong attention to detail and commitment to protecting confidential and sensitive information.

Ability to work independently and collaborate effectively with technical and non-technical stakeholders.

Experience with security certifications such as Security+, CISSP, CISM, CISA, or similar credentials is preferred.

Annual Contract Rate: $87,000 – $113,000 per year, commensurate with experience, qualifications, and scope of responsibility.

Schedule: Full-time, approximately 40 hours per week, Monday through Friday.

Contract Duration: Initial contract assignment with potential for extension or renewal based on business needs and performance.

Flexible Work Options: Remote or hybrid work arrangements may be available depending on organizational requirements.

Professional Development: Access to cybersecurity training, security workshops, professional development programs, and certification support.

Career Growth: Opportunities to expand responsibilities across information assurance, cybersecurity, risk management, compliance, vulnerability management, and security architecture.

Collaborative Environment: Work with cross-functional teams including information technology, cybersecurity, compliance, risk management, legal, and business leadership.

Qualified candidates will be contacted for an interview.

Equal Opportunity Employer: We celebrate diversity and are committed to creating an inclusive environment. All qualified candidates will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetics, disability, age, or veteran status.