Cyber Security Analyst

Skills:

• Extended Detection and Response
• Security Information & Event Management Systems
• Risk Assessment
• Technical Security Controls

The client manages infrastructure, applications, and information to provide services to stakeholders. The client requires information security support to implement the NIST Cybersecurity Framework (CSF) 2.0 and prepare for a third-party assessment of its systems and applications.

The candidate will work under the client s Information Security Officer to implement NIST CSF 2.0 for a Moderate impact system by gathering information, developing foundational documents (System Security Plan, Minimum Security Control Implementation, Business Impact Analysis, Contingency Plan, Change Management Plan, etc.), and documenting security control status (implemented, partially implemented, or not implemented).

Responsibilities:

• Review existing documents, policies, and procedures; interview stakeholders; examine system outputs and artifacts.
• Create and maintain documentation addressing applicable security controls.
• Develop a plan of actions and milestones for security control gaps.
• Collaborate with leadership, the Information Security team, and managers to implement and monitor security controls.

Candidate Skillset:

• Bachelor s degree in IT or related field
• 5+ years of experience in information security, including leadership roles
• Hands-on experience in risk management, security assessment, architecture, and incident response
• Knowledge of IT infrastructure and NIST standards (RMF or CSF)
• Relevant certification preferred (CISSP, CISM, CISA)
• Strong communication and writing skills