Cybersecurity Consultant

Refulgent Technologies - Columbia, SC

Full-time

Columbia, SC

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Consultant will be responsible for performing detailed architectural reviews and risk analysis of security-related requests, ensuring compliance with various security standards and frameworks. This role involves championing the design and implementation of security and compliance efforts, auditing internal systems, and collaborating with agency leadership and business partners to mitigate security risks. The consultant will also serve as the primary point of contact for third-party audits and assessments, utilizing various tools to document and report findings.

Responsibilities

• Perform detailed architectural reviews and risk analysis of security-related requests.
• Champion the design, development, implementation, and ongoing maturation of security and compliance efforts.
• Audit and assess internal agency systems and business partner information system security controls.
• Utilize Microsoft Office, System Center Service Manager, RSA Archer eGRC system, and other products for documentation and reporting.
• Perform security and compliance reviews of contracts and agreements.
• Serve as primary point of contact for third-party audits and assessments.
• Collaborate with agency leadership and stakeholders to provide recommendations for risk mitigation.

Requirements

• Strong working knowledge of FISMA, NIST, CMS MARS-E, and HIPAA Security and Privacy.
• 5+ years of experience in IT working with and/or auditing IBM System 390/zSeries, Windows, Linux, Databases, Networking Infrastructure, and Web-based Applications.
• Prior experience working within a FISMA compliant program.
• Prior experience in working with eGRC systems.
• Prior Health Information Technology experience.
• ISC(2), ISACA, SANS GIAC and/or other Information Security Certification is required.
• Ability to work independently and as part of a team.
• Ability to collaborate and coordinate with multiple teams and vendors.
• Ability to multitask and prioritize tasks effectively.
• Experience and training with eGRC solutions.
• Ability to engage diverse audiences of varying technical and non-technical skill levels.
• Intermediate to advanced skills in Microsoft Office products.
• Keen attention to detail while maintaining the ability to see the big picture.
• Ability to absorb, retain, and communicate complex processes.
• Ability to accept changes and constructive criticism.

Nice-to-haves

• BS degree in computer science or similar discipline.
• Prior ITIL experience in Information Security Management.