United States Senate Employment Office’s Post

One of my favorite recruiters Jared Bills has a few openings in cyber/GRC area. Most of the time I don't hype recruiter postings because I had bad experiences/no contact/bad service from them. Jared isn't one of them. Here is what he has on his hot sheet right now; Compliance Analyst – ISO Framework 12 months Contract, 100% Remote Top Skills' Details * Specific experience with ISO27001 audits (version 2013 and/or 2022) ---- THIS IS A MUST HAVE * 5+ years experience in compliance, the audit process and corporate compliance policies * Experience with access reviews a must * Collaborate with other GRC team members and/or auditors when necessary * Enthusiastic approach to the job and a cultural fit with the company and the team * Someone who can role up their sleeves and be hands on when needed Security Assurance Lead 4 months contract to hire, 100% Remote Top Skills' Details 1. IT Audit/Assessment experience - needs to have a lot of depth in performing audits - battleworn within the audit space vs just reciting what you know to be true 2. Technical background - This role is supporting the infrastructure and cloud org, need to keep team members on scope, deal with conflict w/ engineers, working between legal, Cyber and IECO. this is not a technical role but need to speak to infrastructure teams 3. program management- ability to work cross functionally and juggle several projects/workstreams at once  

Urgent Requirement! Cyber Security Analyst Exp: 8+ Years Location: FL Only W2 Client: State of FL Education: All Consultants must have earned a bachelor’s degree in cybersecurity, information technology, computer science, Management Information Systems (MIS), English, or other related field   Required Duties and Responsibilities of Consultant shall include but are not limited to: The candidate will create comprehensive policies and procedures based on the NIST CSF framework.  The duties of the candidate will include the following: • Conduct an assessment of the organization's current cybersecurity policies and procedures against the NIST CSF framework. • Identify gaps and areas where policies and procedures need to be developed or revised to align with NIST CSF guidelines. • Draft clear and concise policies addressing cybersecurity governance, risk management, asset management, access control, incident response, and other relevant areas. • Ensure that developed policies and procedures align with each of the five core functions of the NIST CSF. • Map organizational processes and controls to the appropriate categories within the framework. • Develop detailed procedures that operationalize the cybersecurity policies based on the NIST CSF guidelines. • Engage with key stakeholders, cybersecurity teams, IT personnel, and department heads to gather insights and information necessary for the development of policies, standards, procedures, work details or other relevant required documentation. • Collaborate with these stakeholders to ensure that the policies and procedures are practical, feasible, and aligned with organizational goals. • Maintain accurate documentation of developed policies and procedures. • Implement a version control system to track changes, updates, and revisions made to the documents over time. • Prepare reports and presentations detailing the status of cybersecurity compliance and the effectiveness of NIST CSF-based policies and procedures. • Communicate findings, recommendations, and updates to relevant stakeholders and management. • Collaborate with IT and security teams, legal, compliance, and other relevant departments to ensure a cohesive and integrated approach to cybersecurity.   The contractor will address the needs stated above by accomplishing the following: • Create policies and procedures using the NIST templates to align with each of the five core functions of the NIST CSF. • Create standards using the NIST templates to align with each of the five core functions of the NIST CSF. • Create work details and other relevant required documentation to align with each policy, standard, or procedure as required. • Map organizational processes and controls to the appropriate categories within the framework. Please reach me dhana@infozealus.com #cybersecurity #immediatehiring #hiring #w2 #contract #placement #immediateinterview #closureposition

security Responsible for overseeing following aspects: physical security : Access control surveillance system lock and key management personal security : background check employee screening identity management Data security : Access control Incident report Asset Security : Equipment security property security The security manager ensure the protocol of the ( assets,data and people develop strategies to relieve potential security threat and Rick )

Do you work for a bank or credit union? Do you like to manage risk instead of avoid it? Have you thought of a career in cybersecurity but do not know where to start? If you can answer “Yes” to these three questions, this may be the opportunity you have been looking for!

0️⃣ When you hire a CISO for Compliance Namesake There are a very few organizations who take security seriously. But those who take it seriously are the ones who have resilient business processes, IT processes and security processes. Now hiring a CISO for namesake, just for compliance requirement has become a standard in many companies both in US and of course in India. 💣But as an organization its a ticking time bomb, you are just waiting for a disaster to happen. These companies now put the complete blame on the CISO. 📝There is a legal term due-diligence. Such activities will not be able to prove the due diligence part. #compliance

10 Non-Technical Cybersecurity Roles to Consider in 2024: *Governance, Risk and Compliance *Cyber Security Project Management *Policy Writing *Cyber Law *Compliance Auditor/Analyst *Cyber Security Sales/Marketing Specialist *Security Awareness Trainer *Data Protection Officer *Third Party Risk Manager/Analyst *Customer Success Manager Which other non-technical roles have I missed?

ENTRY LEVEL CYBER SECURITY ROLES, RESPONSIBILITIES, AND SALARIES #IT specialists #Cybersecurity specialists #Information security specialists IT security specialists IT information security specialists #Digital #forensics analysts  Cyber forensic analysts  Digital forensic examiners Security #investigators Cybersecurity #incident #response analysts Incident response #analysts  Incident response #specialists Information security analysts IT #audit #managers IT #internal auditors IT service #delivery managers #Audit and assurance managers

Governance and Compliance Analysts, does your current salary💰 match the industry standard? Explore your career path options and tools you need to advance your career forward: https://hubs.ly/Q029Cllj0 #knowyourworth #governanceandcompliance #cybersecurity #salary #skills

You don't need a super technical background to start in one of these jobs. The more you can learn about GRC and the Cyber Security Industry as a whole, the better chance you have of landing one of these jobs. Types of Jobs: 🟡 GRC Analyst: Focuses on analyzing and enforcing compliance with regulations and standards. They assess risks, report on compliance gaps, and recommend improvements. 🔵 Compliance Officer: Ensures that an organization's security policies and procedures comply with regulatory and legal requirements. They conduct audits and assessments to identify non-compliance issues. 🟠 GRC Consultant: Provides expert advice on governance, risk, and compliance issues to organizations. They help develop GRC frameworks, policies, and procedures tailored to the organization's needs. 🟤 Risk Manager: Identifies, evaluates, and prioritizes risks affecting the organization's information assets. They develop strategies to mitigate these risks and ensure alignment with business objectives. 🔴 Privacy Officer: Ensures compliance with privacy laws and regulations. They manage activities related to the development, implementation, maintenance of, and adherence to policies and procedures covering the privacy of, and access to, personal information. 🟢 Cybersecurity Policy Analyst: Develops and analyzes policies governing the security of information systems. They ensure policies comply with federal and industry regulations and standards. 🟣 Vendor Risk Manager: Manages risks associated with third-party vendors that provide services or products. They conduct risk assessments of vendors and ensure compliance with security standards and practices. #GRC #COMPLIANCE #RISK #GOVERNANCE