NWS · 1 day ago
Cybersecurity / Compliance Specialist (Tier 3)
Greensboro, NC
Full-time
Hybrid
Mid Level
4+ years expNWS is a telecom distributor expanding into an IT Service Provider, and they are seeking a Cybersecurity / Compliance Specialist (Tier 3) to enhance their cybersecurity posture. The role involves developing security policies, implementing security controls, and coordinating compliance activities across various environments.
LogisticsTelecommunicationsWireless
Responsibilities
Develop, maintain, and update enterprise cybersecurity policies, standards, procedures, and guidelines aligned with business operations and modernization initiatives
Establish policies covering cloud security, application security, endpoint protection, identity and access management, and data protection
Translate regulatory requirements and security frameworks into actionable internal controls and operating procedures
Provide leadership with cybersecurity posture assessments, policy impact analysis, and risk insights
Implement and manage administrative, technical, and operational security controls across enterprise systems and platforms
Support control implementation within cloud platforms, applications, endpoints, integrations, and identity systems
Perform control testing, validation, and evidence collection to ensure controls are operating effectively
Coordinate remediation activities for identified security gaps, vulnerabilities, and audit findings
Support secure configuration, monitoring, and access control for cloud-hosted environments
Coordinate application security practices, including secure configuration, authentication, authorization, and vulnerability remediation
Support endpoint security controls including device hardening, monitoring, and protection mechanisms
Ensure consistent security baselines and configuration standards across environments
Support identity and access management controls, including role-based access, least-privilege enforcement, and periodic access reviews
Partner with data and IT teams to ensure sensitive data is appropriately classified, protected, and monitored
Ensure encryption, logging, and monitoring controls are applied to systems handling critical business and customer data
Coordinate cybersecurity compliance efforts across SOC 2, CMMC, ISO 27001, etc., and customer-driven security requirements
Maintain compliance artifacts including policies, control mappings, evidence repositories, risk registers, and audit documentation
Serve as a point of coordination with auditors, assessors, and internal stakeholders during readiness assessments and audits
Track compliance milestones, remediation activities, and control ownership
Conduct security and risk assessments across enterprise systems and business processes
Support incident response activities, including investigation support, root cause analysis, and corrective action tracking
Ensure logging, monitoring, and alerting mechanisms are operational and aligned to enterprise security objectives
Maintain accurate security documentation, system inventories, and data flow diagrams
Partner with IT, Engineering, Data, and Operations teams to embed security into modernization initiatives
Provide guidance to support secure adoption of new technologies, platforms, and services
Contribute to cybersecurity awareness and secure-by-design practices across the organization
Qualification
Required
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field
4-8+ years of experience in cybersecurity, information assurance, risk management, or security operations
Experience developing cybersecurity policies and implementing security controls
Hands-on experience supporting cloud, application, endpoint, identity, and data security controls
Experience coordinating or supporting SOC 2, CMMC, ISO 27001, or similar compliance initiatives
Ability to communicate security requirements clearly to technical and non-technical stakeholders
Preferred
Experience in telecom, distribution, IT services, or technology-enabled environments
Familiarity with modern security frameworks (e.g., Zero Trust, NIST, ISO) and risk-based security approaches
Experience working with cloud platforms (Azure preferred) and SaaS environments
Professional certifications such as Security+, CISSP, CISM, CRISC, or ISO 27001 Lead Implementer (or in progress)
Company
NWS
Founded in 2012, NWS is a Master Distributor of Digital Infrastructure and Telecom Solutions, serving the full breadth of Broadband and Mobility markets.
51-200 employees
Funding
Current Stage
Growth StageTotal Funding
$35MKey Investors
CIT Northbridge Credit
2024-06-18Debt Financing· $35M
Leadership Team
Xavier D. Williams
Chief Executive Officer
Adrian Alday
Chief Financial Officer
Recent News
Company data provided by crunchbase