IT Solutions Engineer

Ransomware Recovery Governance Specialist

Location: Oakland, CA

Duration: 12 Months

Responsibilities:

• Support the maturation and day-to-day operationalization of the ransomware recovery governance program through hands-on process execution, documentation updates, and technical validation activities.
• Apply and enforce ransomware recovery maintenance policies by performing configuration checks, control verification, and operational compliance reviews.
• Coordinate and execute testing for protected applications, including technical recovery validation, dependency mapping, and test result analysis.
• Design and implement the application review and onboarding workflow, including technical assessments, readiness evaluations, and control implementation support.
• Develop and document the decision authority framework by gathering requirements, validating operational roles, and ensuring alignment with technical processes.
• Partner with incident response teams to build and refine the ransomware incident response plan, leading technical exercises, simulations, and tabletop scenarios.
• Contribute technical insights to future-state technology assessments, tool evaluations, and ransomware resilience capability improvements.
• Review and enhance existing security policies and standards, backup and recovery strategies, risk management processes, and roles and responsibilities (RACI).
• Conduct detailed assessments of ransomware preparedness across technology platforms and infrastructure, operational and recovery processes, team readiness and skillsets, and alignment with NIST CSF, NIST 800-61, CIS Controls, and industry best practices.
• Identify gaps, document remediation requirements, and support implementation of technical and procedural improvements.
• Deliver a comprehensive current-state ransomware preparedness assessment within the first 30 days.
• Develop and maintain a ransomware risk heat map, incorporating technical findings, test results, and operational insights.
• Support the creation of technical training materials and curriculum for operations and support teams.
• Prepare executive-level presentations and reporting materials summarizing technical risks, findings, and progress.
• Establish and maintain a cyber recovery tracking repository and reporting dashboard, ensuring accurate and timely data collection.