Cyber Security Specialist

Cybersecurity Analyst

Support maintenance of cybersecurity policies, procedures, and controls to protect the organization's information assets from unauthorized access, use, disclosure, disruption, modification, or destruction.

Conduct risk assessments to identify and prioritize risks to the organization's information assets.

Support the creation of risk mitigation strategies to reduce the likelihood and impact of risks.

Support the development and implementation of the organization's cybersecurity control framework.

This role proposes and advocates to the Global Director and Senior Manager of Information Security on GRC strategies.

Engage with stakeholders to understand their security requirements and develop and implement controls to meet those requirements.

Work with third-party vendors to ensure that they meet the organization's security requirements.

Provide training and awareness to enterprise users on cybersecurity best practices.

Continuously researching and improving the awareness program based on current cyber security risk levels.

Stay up-to-date on the latest cybersecurity threats and trends.

Other duties as assigned.

Key Tasks:

• Conduct risk assessments to identify and prioritize security risks to the organization's information assets.
• Develop and implement controls to mitigate identified risks.
• Monitor the effectiveness of controls and recommend improvements as needed.
• Report on compliance with applicable regulations.
• Work with business stakeholders to understand their security requirements and develop and implement controls to meet those requirements.
• Conduct security awareness training for employees.
• Respond to security incidents and investigations.
• Stay up-to-date on emerging security threats and technologies.

Education and/or Experience Required (including certifications):

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (Master's degree preferred).
• Strong understanding of cybersecurity principles, risk management, and compliance frameworks (NIST CSF, ISO, CIS18 etc.).
• Experience in conducting cybersecurity risk assessments and vendor risk management.
• Proficiency in developing and delivering cybersecurity training and awareness programs.
• Proven ability to collaborate across departments and influence stakeholders.
• Experience with risk assessment methodologies.
• Experience with security controls such as firewalls, intrusion detection systems, and encryption.
• Experience with security compliance frameworks such as ISO 27001, HIPPA, PCI DSS, or similar.

Required Skills: Vendor Risk Auditing Additional Skills: Security Engineer This is a high PRIORITY requisition.