Cybersecurity Senior Specialist - Controls & Compliance from Mattson Resource Group
Rosemead, CA 91770
About the Job
Name recognizable Fortune 500 company working on critical infrastructure!
We are seeking a standout colleague with a consistent track record of demonstrating proactive security measures to join our elite Information Technology team. The responsibilities of this role will focus on:
We are seeking a standout colleague with a consistent track record of demonstrating proactive security measures to join our elite Information Technology team. The responsibilities of this role will focus on:
- Leading compliance assessment of IT General Controls, Cybersecurity controls, and regulatory requirements. You will recommend and implement measures to remediate or mitigate risks.
- Developing continuous cybersecurity compliance assessment and monitoring program that applies automated cybersecurity solutions to identify non-compliance to Cybersecurity policies and standards.
- Engaging IT and Organizational Unit collaborators to assess and ensure cybersecurity policies, standards, and controls adherence.
- Participating in projects and provide cybersecurity domain expertise when called upon to develop and enforce standards/policies, identify risks, and determine appropriate cybersecurity risk management approach.
- Developing and presenting executive-level communication related to identified risks and the risk management strategy to IT and OU leadership.
- Lead compliance assessment of IT General Controls, Cybersecurity controls, and regulatory requirements.
- Develop, implement, enforce, and monitor security controls to mitigate risks and protect company assets and sensitive data.
- Assess and implement cybersecurity policies, standards, and controls adherence.
- Participate in projects and provide subject matter cybersecurity expertise.
- Collaborate with multi-functional teams to ensure compliance with industry standards and regulations.
- Stay informed about the latest cybersecurity threats, trends, and technologies to continuously improve security measures.
- Prepare and present executive-level communication of identified risks and the risk management strategy to IT and OU leadership.
- Five (5) or more years of experience in Cybersecurity, Information Security, or related Information Technology role.
- Experience in IT General Controls, Cybersecurity controls, and regulatory requirements.
- Experience with enforcing and monitoring security controls.
- Experience in Information Technology and Operational Technology environment.
- Experience with regulatory compliance and/or audits.
- Superb communication and collaboration skills, with the ability to work effectively with multi-functional teams.
- Strong analytical and problem-solving abilities, with a keen attention to detail.
- Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Security, or Information Technology related field.
- Possess one or more of the following Cybersecurity / Information Security certifications: (Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Risk and Information Systems Control (CRISC), Global Information Assurance certification (GIAC), and/or any relevant certifications).
- Experience and knowledge working within a NIST Cybersecurity Framework.
- Experience and knowledge working with NERC/CIP standards.
- This position’s work mode is hybrid.
- Relocation may apply to this position.
- The primary work location for this position is San Gabriel Valley however, the successful candidate may also be asked to work for a period out in the field throughout the company service territory.
- This position has been identified as a NERC/CIP impacted position – Prior to being hired, the successful candidate must pass a Personnel Risk Assessment (PRA) or Background Investigation. Once hired, the candidate must complete specified training prior to gaining un-escorted access to assigned work location and performing necessary job duties.
- Candidates for this position must be legally authorized to work directly as employees for any employer in the United States without visa sponsorship.
- US Citizenship required as part of Critical Infrastructure security protocols.
Salary
120,000 - 160,000 /year