Job Description

Our client has an immediate need for a full-time Cyber Security Analyst to join the Office of the CIO team.

Location: The role will be 100% remote while COVID-19 travel/social distancing restrictions are in place. Once those restrictions are lifted, onsite requirements will be reassessed at that time.

Term: October 12, 2020 to October 12, 2021 with possible extension

The role will focus on leading the implementation and maintenance of drafted cyber security standards based on NIST 800-53, ITSG-33 and best practice. This includes creation of controls overall, updates to security standards, consultation with product teams and other stakeholders on the controls for both on-premise and cloud environments. The successful Incumbent will also maintain a central mapping of controls to security frameworks such as NIST 800-53 and ITSG-33. Vendor security reviews, including the review of security provisions within contracts and follow up activities may be required. In addition to these reviews, the resource will provide general security consultation to various areas of the organization as required.

Required Skills:

• Thorough knowledge of security and information risk management processes
• Lead development, implementation and maintenance of information risk and cyber security policies and standards
• In depth knowledge of cloud deployment models, security responsibilities and cyber security frameworks (For example, NIST 800-53, ISO 27001:2013, and ITSG 33, etc.)
• Experience mapping security controls across various frameworks
• Extensive experience leading and conducting vendor security assessments including experience with the review of Security Organization Control reports (SOC) including SOC 1 and SOC 2 reports, and managing the completion/resolution of any gaps found during the assessments
• Excellent consulting, facilitation, verbal, written and listening skills are required. The ability to work effectively and communicate with internal and external contacts at all levels is required.
• Knowledge is generally acquired by having completed an undergraduate degree in Computer Science, 7 years of related security experience, or an equivalent combination or education and experience.

Job Tags

Similar Jobs