IT Security Specialist (NC815891)

IT Security Specialist (NC815891)

Required Knowledge, Skills, and Abilities

1. Thorough knowledge of mainstream operating systems and security technologies, including network security appliances, identity and access management, and cryptography.
2. Working knowledge of the IT security industry and federal/state regulations, with deep understanding of NIST SP 800-53, SP 800-30, and SP 800-37
3. Strong ability to perform vendor interviews, evaluate evidence, and provide feedback to vendors
4. Ability to prioritize and summarize risk assessment status to project managers and executive leadership.

Minimum Education and Experience

1. Bachelor’s degree in Computer Science or a related IT field from an appropriately accredited institution and two years of progressive experience in IT Security or a closely related area; OR
2. Associate degree in Computer Science or a related IT field and three years of progressive experience; OR
3. An equivalent combination of education and experience

Required Qualifications

1. Professional certifications such as CISSP or CISM.
2. Experience performing NIST 800-53 based risk assessments.
3. Experience with the NIST Cybersecurity Framework (CSF) and Privacy Framework

Preferred Qualifications

4. Experience completing HITRUST risk assessments.