Security and Compliance Engineer – CMMC/NIST SP 800-171

Emploi pas sur LinkedIn

🕒 il y a 8 jours

🍂 Massachusetts – Distant

🍂 Massachusetts – Remote

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Technical Support

Site WebLinkedInTous les Emplois

- employés

🤝 B2B

🏢 Entreprise

B2B • Enterprise

Le support technique est présenté dans le texte fourni comme une désignation générique plutôt qu'une entreprise clairement décrite. Le contenu fourni semble être une page LinkedIn et ne contient aucune information spécifique à l'entreprise (pas de produits, services, taille ou emplacements). Basé uniquement sur le nom, « Support Technique » se réfère généralement à des services informatiques/help-desk qui assistent les utilisateurs avec des problèmes logiciels et matériels, du dépannage, ainsi que des ressources de base de connaissances ou de formation. Comme le texte source manque de détails concrets sur l'entreprise, cette entrée doit être traitée comme un rôle/service ou une offre générique plutôt qu'une entreprise distincte et bien documentée.

Description

• Consult and participate in day-to-day security operational activities with clients; • Confirm and document client vulnerability and security risks and develop mitigation plans; • Monitor and validate client security controls; • Respond to security alerts, incidents, and issues; • Ensure security controls meet multiple compliance needs and best practices; • Conduct, write, and present client Security and Risk Assessments using recognized frameworks (NIST SP 800-171 and PCI DSS v3.2 or other security compliance frameworks); • Create accurate network diagrams and documentation for planning security-based changes, investigating network impact, and issuing resolution procedures; • Coordinates and tracks security awareness training to the organizational workforce on information security standards, policies, and best practices; • Consistently review relevant Cyber Security Compliances to educate clients on revisions and changes in requirements; • Assist in investigating security breaches by leading the incident response to minimize impact, determine the cause of the breach, and ascertain the extent of the damage; • Travel as needed for on-site assessments and meetings at client locations; limited and infrequent.

🎯 Exigences

• Bachelor's degree preferable in Information Technology or other engineering or technical discipline • 6-8 years IT experience and minimum 4 years Cyber Security Information experience • One or more Industry security certifications REQUIRED, Certified Information Systems Security Professional (CISSP), CISA Certified Information Systems Auditor (CISA), CISM Certified Information Security Manager (CISM), ISSAP Information Systems Security Architecture Professional (ISSAP), ISSEP Information Systems Security Engineering Professional (ISSEP); (OR equivalent) • Experience with modern operating systems including Windows 10/11 and Server 2016/2019, macOS, and Linux • In-depth understanding of NIST SP 800-171, CIS Controls, and/or other security compliance frameworks • Experience in developing organization security policies and implementation of revised policies • Experience with endpoint security solutions, including file integrity monitoring and data loss prevention.

🏖️ Avantages

• Health and Dental • Life Insurance • Paid Time Off • Discretionary Bonus • Retirement Savings with Employer Matching Contribution • 401(k) • 401(k) matching • Dental insurance • Flexible spending account • Health insurance • Life insurance • Paid time off • Vision insurance