Principal Information Security Engineer

Job Summary

Leading critical security programs, the full-time remote Principal Information Security Engineer will advance the enterprise cybersecurity risk and governance strategy, focusing on third-party risk assessments, NIST Cybersecurity Framework transformation, and external security posture management.

Key responsibilities

• Lead enterprise cybersecurity risk assessments and measure program maturity using the NIST Cybersecurity Framework
• Oversee security assessments of vendors and communicate third-party security risks and remediation recommendations
• Develop dashboards and executive reporting related to cybersecurity risk and program performance

Required qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, Business Administration, or related field
• 5+ years of experience in Information Security, IT Risk Management, Compliance, or related disciplines
• Experience conducting security risk assessments in on-premises and cloud environments
• Experience developing security policies and governance processes
• Preferred Certifications: CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Auditor/Implementer