Senior Cyber Risk Engineer | NIST CSF/RMF Lead

White Cap Supply Holdings, LLC.; United States; Hybrid; USD 110,000 - 170,000; Full time

Job summary

White Cap Supply Holdings, LLC. is seeking a cybersecurity risk professional to implement and maintain risk frameworks (NIST CSF/RMF) and to assess security controls across the organization.

The role requires deep expertise in identifying gaps, leading risk mitigation, and communicating findings to senior IT leaders. Hybrid work arrangement and opportunities to influence security posture across critical infrastructure.

Qualifications

• 5+ years of cybersecurity experience conducting risk assessments, identifying security gaps, and mitigation strategies.
• Strong analytical and problem-solving skills, with the ability to communicate complex technical issues to senior IT leaders and non-technical stakeholders.
• Experience with identity and access management (IAM), identity governance and administration (IGA), and Privileged Access Management (PAM).
• Knowledge of access governance, least-privilege principles, privileged account lifecycle management, access reviews, RBAC, and security exception management.
• Hands-on experience conducting information security assessments, SC1/SC2 control testing, remediation tracking.
• In-depth knowledge of NIST CSF and RMF with ability to apply to organizational security practices.
• Working knowledge of CIS Controls and CIS Benchmarks; experience documenting control gaps.
• Experience administering risk and control self-assessments (RCSAs) and coordinating with risk/control owners.
• Ability to collect, validate, reconcile, and analyze security data and develop key risk indicators.
• Experience producing security dashboards and executive-level presentations for leadership reviews.
• Certifications: CRISC, CGRC, CISSP or comparable.

Responsibilities

• Conduct thorough and regular risk assessments to identify threats and vulnerabilities related to critical infrastructure.
• Identify, track, and report on Cyber Key Risk Indicators.
• Collaborate with cross-functional teams to integrate security measures into processes and systems.
• Stay updated on emerging cyber threats and industry best practices; conduct threat intelligence monitoring.
• Lead the implementation of comprehensive cyber risk management strategies and risk monitoring.
• Perform annual assessments of operating system security baselines.

Skills

Cyber risk assessments

NIST CSF

RMF

Threat intelligence

Risk governance

IAM/IGA/PAM

Control testing

Executive communication

Security dashboards

Education

BS/BA in related field

MS/MA in related field

Job description

White Cap Supply Holdings, LLC. is seeking a cybersecurity risk professional to implement and maintain risk frameworks (NIST CSF/RMF) and to assess security controls across the organization.

The role requires deep expertise in identifying gaps, leading risk mitigation, and communicating findings to senior IT leaders. Hybrid work arrangement and opportunities to influence security posture across critical infrastructure.