Security Specialist- Mid Level (CISSP or CISM)

Job Title: Security Specialist- Mid-Level (CISSP or CISM)
Duration: 12+ Months contract; Highly possible for long-term extension
Location: Raleigh, NC 27601
Work Arrangement: Remote
Agency Interview Type: Webcam Interview Only

Required Knowledge, Skills, and Abilities

• Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography.
• Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37
• Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors
• Ability to prioritize and summarize risk assessment status to project managers and executive leadership.

Minimum Education and Experience

• Bachelor’s degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR
• Associate degree in Computer Science or a related IT field and three years of progressive experience; OR
• An equivalent combination of education and experience

Required Qualifications

• Professional certifications such as CISSP or CISM.
• Experience performing NIST 800-53 based risk assessments.
• Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework
• Experience completing HITRUST risk assessments.

Required Skills:

• Thorough knowledge of mainstream operating systems/security technologies inc: network security appliances/identity and access management/cryptography
• Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37
• Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors
• Ability to prioritize and summarize risk assessment status to project managers and executive leadership.