Security Specialist- Mid Level

Roles/Responsibilities:

1. Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography.

2. Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37

3. Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors

4. Ability to prioritize and summarize risk assessment status to project managers and executive leadership.

Mandatory Skills:

1. Bachelor's degree in computer science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR
2. Associate degree in computer science or a related IT field and three years of progressive experience; OR
3. An equivalent combination of education and experience
4. Professional certifications such as CISSP or CISM.
5. Experience performing NIST 800-53 based risk assessments.
6. Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework
7. Thorough knowledge of mainstream operating systems/security technologies inc: network security appliances/identity and access management/cryptography 5 years
8. Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37. 3 years
9. Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors 3 years
10. Ability to prioritize and summarize risk assessment status to project managers and executive leadership. 3 years

Desirable Skills:

1. Experience completing HITRUST risk assessments.