CyberSecurity Consultant

• Drive risk management initiatives for multi-cloud environments; ensure alignment with enterprise security standards and regulatory expectations.
• Understand the technical architecture and operational setup of cloud servers and provider integrations to evaluate exposure, control effectiveness, and residual.
• Support internal projects addressing cloud cybersecurity threats; assess the effectiveness and comprehensiveness of first-line cybersecurity controls.
• Review and challenge risk assessments, scenario analyses, control testing, and remediation plans; assist with issue oversight and escalations.
• Monitor and analyze risk trends (internal and external) to proactively mitigate potential issues impacting cloud security posture.
• Promote actions to address root causes of risks

Cybersecurity Controls & Reporting

• Represent EIS GRC in working groups focused on cloud security and multi levels of reporting.
• Translate complex cloud and cybersecurity concepts into clear business terms for non-technical stakeholders and senior management across the Combined U.S. Operations.
• Prepare concise, executive-level reports on risk management activities, control outcomes, and emerging issues for senior leadership.

Cyber Risk Quantification

• Collaborate on initiatives that strengthen the enterprise cybersecurity program; ensure projects align with the cloud security governance model.
• Regularly review and update risk frameworks to reflect changes in the cloud threat landscape, including Oracle-specific risks.
• Lead discussions at all levels to incorporate cloud security risk elements into business strategies and decision-making.
• Guidelines of business through cloud security assessments, translating technical/security questions into business impact and prioritization.

Auditing & Compliance

• Conduct and/or oversee audits and other assessments of cloud technologies and on-prem technologies, ensuring effectiveness, sustainability, and maturity controls.
• Ensure adherence to regulatory requirements and internal policies, including coordination on remediation of identified gaps.
• Support oversight activities related to enforcement agencies, regulatory examinations, and related obligations.

Emerging Security Trends

• Stay current with multiple Cloud platforms for best practices, emerging technologies, and regulatory changes impacting cloud environments.
• Leverage insights to enhance the security posture and influence strategic roadmaps across business and technology teams.

KRIs & Metrics

• Influence comprehensive and consistent practices to identify, measure, monitor, report, and manage information risks.
• Ensure metric quality and relevance (e.g., control efficacy, incident trends, misconfiguration rates, vulnerability aging, and remediation timeliness).
• Responsible for participating with the Information Security team to plan, develop, and execute vulnerability and policy compliance assessments.
• Configures enterprise vulnerability assessment tools, performs internal/external scans, analyzes detected vulnerabilities, identifies the relevant threats and eliminates false positives through manual validation.
• Generates reports on assessment findings and summarizes them to facilitate remediation tasks for other operational teams.
• Will create and updates procedures for the vulnerability and compliance assessment process, including procedures on using the assessment tool (Qualys).
• Work with operation teams and stakeholders on building the asset inventory and grouping.
• Review and update security standards. Will create and maintain compliance controls based on company’’s security standards.

• Skills required are current or previous experience with vulnerability and compliance process and assessment using Qualys, administration preferred.
• Recent hands-on experience with QualysGuard Policy Compliance product and building customized controls.
• Solid working experience and knowledge of *nix operating systems (admin skill in Linux/AIX a plus).
• Knowledge of Windows networking, windows domains and active directory, GPOs and end-point security.
• Performed system hardening based on security standards.
• Ability to perform threat, vulnerability and risk assessments against environment.
• Experience in preparing reports and metrics on the status of completed assessments, progress of remediation actions and performance of the assessment tools.
• Knowledge in industry and government security standards (NIST, CIS, etc.).
• Familiarity with standard security best practices and vulnerability management processes including compliance reporting.
• Excellent verbal and written communication skills, as well as organization and presentation skills.
• 6-7 years of experience.

Our benefits package includes: (EXCLUDE on perm placements)

• Comprehensive medical benefits
• Competitive pay
• 401(k) retirement plan
• …and much more!

About, INSPYR Solutions

Technology, is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients’’ business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.