Security Risk Management Specialist

A Security Risk Management Specialist is an experienced cybersecurity professional responsible for overseeing vulnerability assessments and security audits within a remote environment. This role involves engaging with asset owners and stakeholders to understand mission objectives, identify key assets, and evaluate security risks. The specialist plays a critical role in investigating risks, conducting on-site audits when necessary, and recommending remediation strategies to strengthen organizational security posture.

Responsibilities

• Lead vulnerability assessments and security audits to identify potential risks and exposures.
• Interview asset owners and stakeholders to gather information on mission, strategy, and critical assets.
• Investigate security risks and conduct on-site audits to assess controls and security measures.
• Evaluate the effectiveness of security controls based on established risk frameworks such as NIST, FedRAMP, or FISMA.
• Identify and analyze partner-related risks and exposures affecting organizational assets.
• Recommend and develop remediation strategies within the partner business environment.
• Harden systems to comply with security benchmarks such as CIS, and verify vulnerability resolutions.
• Utilize vulnerability scanners like Qualys to identify and manage system vulnerabilities.
• Automate security-related tasks using scripting and automation tools such as Python or Ansible.
• Stay updated on the latest security standards, frameworks, and cloud security solutions to enhance risk management strategies.

Qualifications

• Over 10 years of experience in cybersecurity, risk management, or a related field.
• Deep knowledge of security controls including FedRAMP, NIST, FISMA, or STIG.
• Proven experience with vulnerability management, resolution, and verification processes.
• Familiarity with system hardening practices to meet CIS benchmarks.
• Experience working with vulnerability scanning tools like Qualys.
• Ability to automate tasks and processes using scripting languages such as Python, Ansible, or similar tools.
• Hands-on experience with cloud security solutions and offerings.
• Strong investigative and auditing skills with the ability to assess complex security environments.
• Excellent communication skills to collaborate with stakeholders and asset owners.
• Availability to work remotely and adapt to flexible schedules as required.

Publishing Pay Range: $60.00 – $68.00 hourly

This is a fully remote role and can be performed from an approved location.