What are the responsibilities and job description for the Cyber Security Audit and Compliance Specialist - SME position at CompQsoft?
Cyber Security Audit and Compliance Specialist - SME
Would you like to live and work in a community outside the hustle and bustle of a large metropolitan area but yet close enough to all the big city amenities? The quaint, coastal town of Elizabeth City, NC with plenty of southern charm will make you feel at home in no time! With its unique location in Northeastern North Carolina, it is a short drive full of waterways and woodlands to the beaches of the Outer Banks, the nearby big cities of Hampton Roads, and the entertainment and recreation opportunities of the Virginia Peninsula. Also, Richmond, VA and Raleigh/Durham, NC are three hours away and the Washington, DC metropolitan area is four. Come live the Southern coastal life and experience the satisfaction of supporting the vital and life-saving work of the US Coast Guard.
Position Requirements:
- Information about existing security products, authorized vulnerability management policies, and procedures.
- Evaluate security requirements and conducts feasibility studies to examine software and hardware requirements, administration costs, and data information flow.
- Assists with the Security Controls Auditor in validating the security controls and the Risk Management Framework.
- Develops and maintains cyber security policy to comply with requirements.
- Plan and schedule cyber project activities and monitors and reports project progress.
- Work with customers to implement system security measures, assists with cyber security plans and documentation and provides technical guidance and training.
- Conduct an analysis of system vulnerability management, remediation solutions, and develop the necessary POAMs.
- Collaborate with internal and/or external security teams regarding audits and security controls.
- Evaluate, tests, monitor, and maintain information security policies, procedures and systems such as hardware, firmware, and software.
- Ensure security design, controls, and procedures are aligned with information security standards and are appropriate to mitigate risk of exposure.
- Identifies security violations, determines cause, and implements procedures to prevent future incidents.
Education:
- Bachelor's or associate degree in Computer Science, Math, Information Technology, Engineering, or related field or at minimum IT Certification.
- Six (6) years' experience is equivalent to three (3) years of education.
Certification:
- This is an IAM-II Level/. MUST possess any IAM-II Level or equivalent.
Minimum Qualifications:
- Six (6) years of experience in Information security with cyber security, security programs or compliance assurance.
- Six (6) years of experience with Security Information and Event Management (SIEM).
- Six (6) years of experience in the risk management framework.
- SECRET Clearance required.
- Basic knowledge of the following: Active Directory, UNIX, Windows, Relational Databases.
- Knowledge of NIST special publications and accreditation and authorization process.
CompQsoft provides equal opportunity in all aspects of employment and in the working environment to all employees and applicants. CompQsoft does not take any non-merit factors like race, color, religion, sex (gender), mental/physical disability, and age into account for purposes of recruitment, hiring and development.
