Apply on Employer Site

Albany International Corp. · 3 days ago

Compliance Specialist

Portsmouth, NH

Full-time

Onsite

Senior Level

5+ years exp

Albany International Corp. is a leading material science developer and manufacturer of engineered components. The Information Security Compliance Specialist will be responsible for managing compliance efforts related to cybersecurity frameworks, developing policies, and leading audits to ensure adherence to regulatory requirements.

3D PrintingIndustrialManufacturingTextiles

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Lead compliance efforts related to CMMC/NIST 800-171 and other relevant government frameworks

Develop and update cybersecurity policy packages and procedures to align with compliance requirements

Lead internal and external cybersecurity audits and risk assessments

Independently review the effectiveness of controls and control gaps based on the results of testing

Provide sound recommendations for audit findings and effectively support conclusions during discussions with stakeholders

Effectively communicate audit issues in both technical and non-technical terms to Operational and IT management

Contribute to the daily monitoring and responding to cyber threats, phishing attempts, and security incidents

Coordinate periodic risk assessments, tabletop exercises, and penetration testing in accordance with best industry practices

Contribute to the enhancement of security operations policies, processes, and playbooks

Contribute to annual awareness training of the workforce on information security standards, policies and best practices

Work with IT operations to ensure security of the global network, mobile devices, and physical security

Work with senior management during tabletop and crisis management sessions

Facilitate the cyber training and development of other IT members

Collaborate with vendor management, procurement, and finance teams on security-related vendor assessments

Maintain relationships with government contractors and Defense Industrial Base (DIB) stakeholders

Qualification

CMMCNIST 800-171IT auditMicrosoft OfficeRisk managementSecurity auditsCommunication skillsDetail orientedCollaborative mindset

Required

5 years of experience in an IT audit, governance, or information security management framework role (e.g. CIS20, NIST 800-53, NIST 800-171/CMMC, ISO27001)

Must be a US citizen and eligible to obtain a SECRET clearance

Experience with government contracting security requirements involving ITAR/CUI

Experience with managing projects and plans of actions and milestones (POA&Ms)

Experience managing risk registers, vulnerability management, and security audits

Extremely proficient in Microsoft Office Applications (e.g. Word, Excel, PowerPoint, and Visio)