Senior Specialist - CyberSecurity

Location: Atlanta, Georgia (Onsite)
Employment Type: Full Time

Responsibilities

• Governance: Develop, maintain, and improve information security policies, standards, procedures, and governance frameworks. Support cybersecurity governance forums, steering committees, and executive reporting. Define and track security KPIs, KRIs, dashboards, and compliance metrics. Assist in establishing governance processes across applications, infrastructure, cloud, and third-party environments.
• Risk Management: Conduct enterprise and cybersecurity risk assessments. Identify, evaluate, and document risks using risk registers. Facilitate risk treatment planning, mitigation, tracking, and risk acceptance processes. Perform threat, vulnerability, and impact assessments to support business decisions. Collaborate with technical teams to drive risk remediation activities.
• Compliance Management: Support compliance initiatives for frameworks such as ISO 27001, NIST CSF, SOC 2, SOX, ITGC, PCI DSS, HIPAA (where applicable), and CIS Controls. Conduct compliance assessments and gap analyses. Track remediation activities and compliance exceptions. Ensure evidence collection and maintenance for audits and assessments.
• Audit Assurance: Coordinate internal and external audits. Prepare audit artifacts and compliance documentation. Review control effectiveness and support control testing activities. Track audit findings and drive closure of corrective actions.
• Third-Party Risk Management: Conduct vendor security assessments and due diligence reviews. Review third-party compliance reports and security questionnaires. Monitor supplier risk posture and remediation commitments.
• Reporting & Stakeholder Management: Develop executive-level compliance and risk reports. Present compliance status, risks, audit findings, and remediation progress to stakeholders. Collaborate with business units, security teams, auditors, and leadership teams.

Requirements

• Strong understanding of Governance, Risk, and Compliance (GRC) principles.
• Experience with risk assessments, risk registers, and remediation tracking.
• Knowledge of information security frameworks and standards (e.g., ISO 27001, NIST CSF, SOC 2, PCI DSS, HIPAA).
• Experience supporting audits and regulatory compliance initiatives.
• Strong analytical, documentation, and reporting skills.
• Excellent stakeholder management and communication abilities.
• Experience using GRC platforms such as ServiceNow GRC, Archer, OneTrust, AuditBoard, MetricStream, or similar tools.

Pay

$110,000–$130,000 per annum. Actual compensation within the range will be dependent upon skills, experience, performance, and internal equity. Additional forms of compensation may include an annual performance-based bonus, sales incentive pay, or other bonus/variable compensation.

Benefits

• Comprehensive medical, dental, and vision plan.
• Short-term and long-term disability coverage.
• 401(k) plan with company match.
• Life insurance.
• Vacation time, sick leave, and paid holidays.
• Paid paternity and maternity leave.