Senior Cyber Security Risk Consultant

About the role

A 6+ month long-term project based in Jersey City and Tampa, offering a competitive compensation range of $70-85/hr. The role requires U.S. Citizenship, GC holders, or authorization to work in the US. This position involves driving risk management initiatives for multi-cloud environments, assessing cloud cybersecurity threats, and promoting actions to address root causes of risks.

Responsibilities

• Drive risk management initiatives for multi-cloud environments; ensure alignment with enterprise security standards and regulatory expectations.
• Evaluate exposure, control effectiveness, and residual in cloud server and provider integrations.
• Assess the effectiveness and comprehensiveness of first-line cybersecurity controls.
• Review and challenge risk assessments, scenario analyses, control testing, and remediation plans; assist with issue oversight and escalations.
• Monitor and analyze risk trends (internal and external) to proactively mitigate potential issues impacting cloud security posture.
• Promote actions to address root causes of risks.
• Represent EIS GRC in working groups focused on cloud security and multi-level reporting.
• Translate complex cloud and cybersecurity concepts into clear business terms for non-technical stakeholders and senior management.
• Prepare concise, executive-level reports on risk management activities, control outcomes, and emerging issues for senior leadership.
• Collaborate on initiatives that strengthen the enterprise cybersecurity program; ensure projects align with the cloud security governance model.
• Regularly review and update risk frameworks to reflect changes in the cloud threat landscape, including Oracle-specific risks.
• Lead discussions at all levels to incorporate cloud security risk elements into business strategies and decision-making.
• Guidelines of business through cloud security assessments, translating technical/security questions into business impact and prioritization.
• Conduct and/or oversee audits and other assessments of cloud technologies and on-prem technologies, ensuring effectiveness, sustainability, and maturity controls.
• Ensure adherence to regulatory requirements and internal policies, including coordination on remediation of identified gaps.
• Support oversight activities related to enforcement agencies, regulatory examinations, and related obligations.
• Stay current with multiple Cloud platforms for best practices, emerging technologies, and regulatory changes impacting cloud environments.
• Leverage insights to enhance the security posture and influence strategic roadmaps across business and technology teams.
• Influence comprehensive and consistent practices to identify, measure, monitor, report, and manage information risks.
• Ensure metric quality and relevance (e.g., control efficacy, incident trends, misconfiguration rates, vulnerability aging, and remediation timeliness).
• Participate with the Information Security team to plan, develop, and execute vulnerability and policy compliance assessments.
• Configure enterprise vulnerability assessment tools, perform internal/external scans, analyze detected vulnerabilities, identify relevant threats, eliminate false positives through manual validation, and generate reports on assessment findings.
• Create and update procedures for the vulnerability and compliance assessment process, including procedures on using the assessment tool (Qualys).
• Work with operation teams and stakeholders on building the asset inventory and grouping.
• Review and update security standards.
• Create and maintain compliance controls based on company's security standards.

Requirements

• Current or previous experience with vulnerability and compliance process and assessment using Qualys, administration preferred.
• Recent hands-on experience with QualysGuard Policy Compliance product and building customized controls.
• Solid working experience and knowledge of *nix operating systems (admin skill in Linux/AIX a plus).
• Knowledge of Windows networking, windows domains and active directory, GPOs and end-point security.
• Performed system hardening based on security standards.
• Experience in preparing reports and metrics on the status of completed assessments, progress of remediation actions, and performance of the assessment tools.
• Knowledge in industry and government security standards (NIST, CIS, etc.).
• Familiarity with standard security best practices and vulnerability management processes including compliance reporting.
• Excellent verbal and written communication skills, as well as organization and presentation skills.

Skills

• Current or previous experience with vulnerability and compliance process and assessment using Qualys, administration preferred.
• Recent hands-on experience with QualysGuard Policy Compliance product and building customized controls.
• Solid working experience and knowledge of *nix operating systems (admin skill in Linux/AIX a plus).
• Knowledge of Windows networking, windows domains and active directory, GPOs and end-point security.
• Performed system hardening based on security standards.
• Experience in preparing reports and metrics on the status of completed assessments, progress of remediation actions, and performance of the assessment tools.
• Knowledge in industry and government security standards (NIST, CIS, etc.).
• Familiarity with standard security best practices and vulnerability management processes including compliance reporting.
• Excellent verbal and written communication skills, as well as organization and presentation skills.

Benefits

Comprehensive medical benefits
Competitive pay
401(k) retirement plan
…and much more!

About INSPYR Solutions

INSPYR Solutions is a national expert in delivering flexible technology and talent solutions. We strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities.