Cyber Security Specialist

We are seeking an experienced Cyber Security Specialist to lead and support security engineering, governance, risk, compliance, audit, and regulatory initiatives across the organization. This role requires a strong technical security background combined with expertise in cybersecurity frameworks, risk management, regulatory compliance, and stakeholder engagement.

The ideal candidate will possess exceptional communication skills, a collaborative mindset, strong project management capabilities, and a proven ability to work effectively with technical teams, business leaders, auditors, regulators, and external partners.

Required Certification: CISSP (Certified Information Systems Security Professional)

Key Responsibilities

Security Engineering & Operations

• Design, implement, and maintain cybersecurity controls and security architecture.
• Evaluate and strengthen security controls across networks, cloud platforms, applications, and infrastructure.
• Support vulnerability management, risk remediation, and security improvement initiatives.
• Partner with IT teams to ensure secure system deployment and configuration.
• Contribute to incident response planning, security monitoring, and threat mitigation activities.

Governance, Risk & Compliance (GRC)

• Lead cybersecurity governance activities aligned with organizational objectives.
• Develop, maintain, and enforce security policies, standards, procedures, and guidelines.
• Conduct security risk assessments and manage remediation activities.
• Ensure compliance with relevant regulations, standards, and frameworks, including:
  • ISO 27001
  • NIST Cybersecurity Framework
  • SOC 2
  • PCI-DSS
  • HIPAA (where applicable)
  • GDPR and privacy regulations (where applicable)

Audit & Regulatory Management

• Coordinate internal and external cybersecurity audits.
• Serve as the primary cybersecurity liaison for auditors, regulators, and compliance assessors.
• Track audit findings and ensure timely remediation of identified gaps.
• Produce evidence, reports, and documentation supporting compliance requirements.
• Monitor evolving regulatory requirements and recommend updates to security programs.

Project Management

• Lead cross-functional cybersecurity projects from initiation through completion.
• Manage project plans, timelines, risks, dependencies, and stakeholder communications.
• Coordinate security requirements for enterprise technology initiatives.
• Ensure projects meet budget, timeline, and compliance objectives.

Collaboration & Communication

• Build strong partnerships across IT, Legal, Risk, Privacy, Operations, and business functions.
• Communicate security risks, recommendations, and compliance status to technical and non-technical stakeholders.
• Facilitate security awareness and education efforts across the organization.
• Influence decision-making through effective communication and relationship management.

Required Qualifications

• CISSP certification (required).
• Bachelor''s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 5+ years of experience in cybersecurity, information security, risk management, compliance, or related disciplines.
• Demonstrated experience in both technical security engineering and compliance/governance functions.
• Experience supporting audits, regulatory reviews, and compliance assessments.
• Strong understanding of cybersecurity frameworks and standards.
• Proven project management experience leading cross-functional initiatives.