Senior Cyber Risk Engineer — NIST CSF/RMF

White Cap Supply Holdings, LLC.; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

White Cap Supply Holdings, LLC. seeks a seasoned cybersecurity professional to implement and maintain risk frameworks (NIST CSF/RMF) and to identify areas where controls are lacking. You will assess threats and guide mitigation across critical systems, collaborating with IT and business teams.

The role focuses on risk-based oversight, KRIs, and ongoing security program enhancements, with a strong emphasis on audit readiness and executive communication.

Qualifications

• 5+ years of cybersecurity experience conducting risk assessments.
• Strong analytical and problem-solving skills, with ability to communicate complex issues.
• Experience with IAM, IGA, and PAM processes and platforms.
• Knowledge of NIST CSF and RMF frameworks and applying them.
• Experience with CIS Controls and CIS Benchmarks.
• Preferred CRISC / CGRC / CISSP or equivalent certifications.

Responsibilities

• Conduct thorough risk assessments to identify threats and vulnerabilities.
• Identify, track, and report Cyber Key Risk Indicators.
• Collaborate with cross-functional teams to embed security measures.
• Monitor threat intelligence and update risk mitigation strategies.
• Lead implementation of cyber risk management and monitoring.
• Perform annual OS security baseline assessments.

Skills

Cyber risk assessments

NIST CSF

NIST RMF

Threat intelligence

KRI reporting

IAM/IGA/PAM

Communication to senior leaders

Education

BS/BA in a related discipline

MS/MA in a related field

Job description

White Cap Supply Holdings, LLC. seeks a seasoned cybersecurity professional to implement and maintain risk frameworks (NIST CSF/RMF) and to identify areas where controls are lacking. You will assess threats and guide mitigation across critical systems, collaborating with IT and business teams.

The role focuses on risk-based oversight, KRIs, and ongoing security program enhancements, with a strong emphasis on audit readiness and executive communication.