Principal Information Security Engineer

Responsible for strengthening the security posture of the organization, the full-time remote Principal Information Security Engineer will lead cybersecurity risk assessments, manage security awareness initiatives, and develop risk mitigation strategies while serving as a trusted advisor across various business units. Key responsibilities: Lead cybersecurity risk assessments and security maturity evaluations using industry frameworks to identify control gaps and emerging risks Develop and execute risk-informed phishing campaigns and cybersecurity education programs to enhance employee awareness and cyber resilience Collaborate with business leaders to translate complex cybersecurity risks into actionable business insights and recommendations Required qualifications: Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, Business Administration, or a related field 5+ years of experience in Information Security, Cybersecurity, IT Risk Management, or related disciplines Experience conducting security risk assessments and evaluating security controls in various environments Solid understanding of cybersecurity governance, risk management, compliance frameworks, and third-party risk management practices Extensive knowledge of industry frameworks and standards, including NIST CSF and ISO 27001