Cyber Risk and Compliance Engineer

Location: Sandy Springs, GA – Hybrid (Local or Nearby)

Duration: long-term contract

Visa: No H1B CPT

Candidate must have at least 10+ years of cyber security experience.

Client is located in Sandy Springs, GA and is looking for a candidate to come to office on a hybrid model so please only send candidates who are local to the area.

Responsibilities

Collaborate with cross functional teams to validate they are effectively implementing relevant security controls, understand their operations, and compliance with corporate standards.
Monitor and enhance the controls necessary to achieve and maintain SOC 2, PCI DSS, HIPAA, NIST 800-53, ISO 27001, GDPR, and other compliance requirements. Routinely test controls as required.
Assist external parties delivering projects related to compliance or other security initiatives.
Facilitate and provide governance over internal assessments and external audits of the compliance programs.
Develop, revise, and maintain remediation plans in coordination with the remediation owners. Track the remediation plans to closure.
Manage and develop the cyber security control frameworks supporting security compliance objectives.
Maintain tools and processes that enable governance of compliance.
Assist in the development of key reporting metrics and executive presentations to promote awareness and support of compliance programs.
Performance of other duties and responsibilities as assigned.

Minimum

BA degree Cybersecurity, Computer Science, IT Management or other directly related field and 10+ years of experience in related field.
5 years information security controls, information technology audit, or security risk management.
Ability to influence across functional teams to achieve desired business results.
Excellent verbal and written communication skills.
Strong attention to detail, well organized, and able to manage time effectively.

Preferred

Demonstrated experience with at least 3 of the following: SOC 2, PCI DSS, HITRUST, HIPAA, ISO 27001, and NIST 800-53.
A Background in 2 or more of Finance, Healthcare and Cloud security compliance preferred.
Professional services audit or consulting background.
2 or more years as a cyber security consultant in any relevant field.
At least one relevant industry certification, for example: CISSP, CISA, CISM, CRISC.

Thanks and Regards