Senior Cybersecurity Specialist
$99,300–$198,700 year
RemoteUnited States
Job Summary
Assist Compliance and Information Security in internal control assessment, auditing, monitoring, risk management, and mitigation. Identify risks and ensure adherence to industry standards, laws, and regulations by reviewing compliance issues, developing policies, and evaluating business continuity procedures. Conduct periodic reviews to determine security violations, implement controls, and perform threat and risk analysis to eliminate performance issues. Support external and internal audits through gap assessments, evidence collection, walkthroughs, and reporting, while triaging and documenting incident response events. Maintain security standards, guidelines, and procedures aligned with frameworks such as ISO 27001 and NIST, and serve as a security consultant to guide secure practices across cross-functional teams.
Required Qualifications
- Bachelor's Degree in a related field or an equivalent combination of education and work experience
- Minimum 8 years cybersecurity or Mobile and embedded software cybersecurity experience
- Strong preference for compliance experience
- Experience in Audit and certification process
- Demonstrated knowledge of General IT Controls, including Information Security, Information System Operations, Vendor Management, Business Continuity, Networks, Database, System Software, Hardware, and Application Development controls
- Strong analytical skills to analyze laws, regulations and translating the security requirements into appropriate security programs, projects, controls, and training
- Ability to effectively communicate business risk as it relates to cybersecurity
- Demonstrated excellent oral and written communication skills for interaction with all levels of management and staff including the ability to communicate regulatory requirements, security objectives, policies, and standards in business terms
- Strong team player with the ability to communicate effectively within cross-functional groups and perform peer reviews of work products and documents
- Excellent organizational skills and critical attention to detail and deadlines with the ability to handle multiple tasks simultaneously
- Hold one or more cybersecurity certifications (e.g., CISSP, CISA, CISM, CCSP, etc.)
- Self-motivated, well-organized and able to position controls in anticipation of threats
- Track record of acting with integrity, produce high quality deliverables, ability to take action upon receiving feedback, seeking to innovate, learn fast and be adaptable
- Understanding of ISO 27001 and NIST cybersecurity frameworks
- Advanced experience applying AI into everyday tasks including utilizing AI Skills and Automations, AI agents, MCP servers
- Must be able to lift 50 lbs
Desired Qualifications
- Medical device product security experience
- Business Continuity & Quality Management
- Experience with data privacy regulations to include US HIPAA and EU GDPR
- Risk Management and risk assessment experience
- Development process and security process knowledge
- Up-to-date understanding of a wide range of incident response, system configuration, vulnerability management and hardening guidelines
- Understanding of vulnerability management and penetration-testing
- Understanding of software development lifecycle (SLDC) and secure design principles
- Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model and common security elements
- Understanding of OWASP, CVSS, the MITRE ATT&CK framework
- Familiarity with AWS cloud configurations
- Understanding of containerization, specifically Kubernetes
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.