Information Security Risk Specialist

About the role

The Opportunity: Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is an information security risk specialist like you who will break down complex threats into manageable plans of action.

Responsibilities

• Work with our team's and client’s subject matter experts to provide cybersecurity and privacy analysis throughout the security assessment and compliance lifecycle process.
• Review technical details from product designers, client subject matter experts, and organizational partners to assess the entire threat landscape.
• Plan and develop continuous monitoring of cybersecurity and privacy policies, programs, compliance artifacts, and standards in support of security governance and industry security compliance, systems accreditation, and management.
• Work with your team to guide your client through a plan of action with presentations, white papers, and milestones.
• Work with your team translating security concepts so the client can make the best decisions to secure their tools, data, and interconnections to partners.

Requirements

• 5+ years of experience in cybersecurity or information technology
• 2+ years of experience working directly with DoD RMF Process ATO package development, including implementation of security controls and continuous monitoring efforts
• Experience with a current operating system or with network devices
• Experience assessing organizational risks and recommending mitigation strategies
• Experience developing and maintaining RMF documentation, including Policies, Plans, and Procedures
• Experience with RMF, STIGs NIST 800-53, NIST 800-161, and eMASS
• Ability to communicate clearly with technical and non-technical audiences, collaborate closely with teammates and client personnel, and hold yourself and your teammates accountable to deadlines

Qualifications

• Secret clearance
• HS diploma or GED
• DoD 8140 IAM Level 1 Certification

Skills

• Experience with a wide range of current and legacy operating systems, including Windows, Linux, and different varieties of Unix
• Experience with network devices, including switches and routers
• Experience describing cloud environments, physical server rooms, and stand-alone enclaves
• Experience using and configuring vulnerability assessment tools
• Knowledge of software development practices and tools
• Knowledge of cybersecurity principles, threat intelligence, penetration testing, Red Team, or incident response

Benefits

• Health
• Life
• Disability
• Financial
• Retirement
• Paid Leave
• Professional Development
• Tuition Assistance
• Work-Life Programs
• Dependent Care

Pay

The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD).

Schedule

This position is located in Albuquerque, NM.