Qualifications

• Bachelor's degree in Cybersecurity, IT, or related field; or 6 years of relevant experience with an Associates/high school diploma and certifications.
• CISSP certification preferred.
• 3 years of experience auditing IT controls and conducting compliance assessments.
• 3 years in various IT and security functions like IT audit, cybersecurity, or contracts management.
• 3 years of knowledge in information security standards (NIST 800-171, 800-53).
• 3 years of foundational understanding of network and systems administration (e.g., Windows, Linux, TCP/IP).
• Valid/clear driver’s license required.

Responsibilities

• Pursue technologies' selection, acquisition, and maintenance compliantly.
• Apply cybersecurity frameworks and policies Institute-wide for remediation opportunities.
• Raise awareness of cyber risks through risk assessment and report findings for mitigation.
• Propose and review security metrics to showcase progress and improvement areas.
• Assist in contract review and manage third-party risk.
• Evaluate internal controls and compliance with cybersecurity frameworks.
• Author and track Plans of Action and Milestones for security control compliance.

Benefits

• Supportive work environment focused on continuous learning and development.
• Opportunities to engage in cutting-edge cybersecurity initiatives.
• Chance to influence organizational cybersecurity governance.
• Collaboration with diverse teams across the Institute.
• Potential for professional growth in cybersecurity auditable roles.