Cyber Security SME

Job Summary

A company is looking for a Cyber Security SME.

Key Responsibilities:

• Track and maintain logs for program-related trainings, develop use cases and test scripts, and report findings
• Review and update GRC specific information security policies and procedures based on regulations
• Create and maintain project status documentation, support GRC module management, and develop monthly status reports

Required Qualifications:

• Experience in drafting security authorization memos and documents
• Ability to analyze information system configurations against NIST SP 800-53
• Thorough understanding of NIST Risk Management Framework (RMF) and OCC's RMF processes
• Experience in developing and reviewing security assessment deliverables
• Knowledge of current industry methods for IT security assessment and monitoring