Apply on Employer Site

MAD Security · 2 months ago

Cybersecurity Risk & Compliance Consultant

Huntsville, AL

Full-time

Onsite

Entry, Mid Level

$70K/yr - $130K/yr

2+ years exp

MAD Security, LLC is a veteran-owned cybersecurity provider dedicated to safeguarding businesses and simplifying the cybersecurity challenge. The Cybersecurity Risk and Compliance Consultant is responsible for conducting cybersecurity gap assessments and providing ongoing consulting to clients, ensuring compliance with various security frameworks.

Cyber SecuritySecurityTraining

Growth Opportunities

Responsibilities

Conduct Cybersecurity gap assessments and provide resulting reports

Conduct Cybersecurity consulting engagements to assist with and partner on clients’ POA&M remediation efforts

Manage and execute project-level tasks and milestones

Educate clients on information security and applicable control requirements

Baseline existing risks, exposure, framework, and compliance levels

Advise on risk mitigation and remediation plans

Qualification

NIST 800-171CMMCDFARSCIS ControlsCybersecurity policiesSOC knowledgeRisk Management FrameworkCustomer-centricGritSelflessProject managementProblem-solvingTime managementIntegrity

Required

SOC (Security Operations Center) knowledge and understanding of services within

2 or more (2+) years of experience in the information security field

Experience leading information security engagements with a preference for DFARS, NIST, and CMMC assessments, as well as reporting

Experience authoring cybersecurity policies, and procedures (to include Incident response, business continuity, disaster recovery, and more)

One (1) or more of the following: Certified CMMC Professional (CCP), Certified CMMC Assessor (CCA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Security+, or equivalent certification

Good time management, project management and problem-solving skills

A desire to take on roles of increasing responsibility including defining services, managing teams, and coordinating resources

Integrity: Ethical and respectful to clients and team

Grit: Ability to self-motivate, self-manage, and meet deadlines when faced with competing priorities

Customer-centric: Understand that partnership with our clients is a 'win-win' scenario

Selfless: Understand that when one team member succeeds, we all succeed

Ability to review security architecture and advise on security requirements