RQ00689 - Security Specialist - Intermediate

• Develops and implements cyber security strategy and architecture
  
• Designs and maintains security controls and processes to protect systems, networks and data
  
• Reviews system security measures, and recommends and implements enhancements
  
• Collaborates with other Information and Communication Technology and business departments to align security measures with security standards, policies and regulations
  
• Stays updated on cyber security threats, and recommends new security technology and strategy improvements
  
• Implements new cyber security solutions and technologies
  
• Provides guidance to IT staff on security best practices
  
• Develops and maintains cyber security reference architecture for consistent security controls
  
• Implements incident response and disaster recovery plans
  
• Business continuity planning, contingency planning, disaster recovery planning, incident and response, business impact analysis, risk management methodologies including data center and application contingency testing to apply concepts in support of all organizational initiatives.
  
• Experience with Control Testing and Assurance
  
• Experience with Audit against NIST, CIS and ISO framework
  
• Experience with implementing Risk Management Framework NIST RMF

Requirements

Deliverables

• Implement Data Loss Prevention (DLP)
  
• Develop Cybersecurity Program
  
• Launch Security Awareness Program
  
• Deploy Microsoft Defender
  
• Implement Security Awareness and Training Program
  

Must Haves:   

• 5+ years experience  
  
• Develops and implements cyber security strategy program and architecture
  
• Experience with Control Testing and Assurance
  
• Experience with Audit against NIST, CIS and ISO framework
  
• Experience with implementing Risk Management Framework NIST RMF
  
• Implements new cyber security solutions and technologies