Fractional Cybersecurity Specialist

We are seeking a detail-oriented Fractional Cybersecurity Specialist to address our Credit Union’s GLBA and IT audit concerns through expert cybersecurity practices. This role offers a flexible, part-time engagement for professionals passionate about safeguarding IT infrastructure, cloud environments, and network systems. As a key contributor, you will leverage your cybersecurity expertise to assess risks, implement security measures, and respond swiftly to security incidents, ensuring compliance with industry standards such as ISO 27001 and NIST frameworks. Your proactive approach will help us maintain a resilient security environment across diverse technological landscapes., * Conduct comprehensive vulnerability assessments and security risk analyses across IT infrastructure, including LAN, WAN, cloud platforms (AWS, Google Cloud), and on-premises systems.

• Develop and implement security policies aligned with ISO 27000 series standards and best practices for information security management.
• Manage network security devices such as Cisco ASA firewalls, Cisco ISE for identity management, IDS/IPS systems, and SIEM tools like Splunk or New Relic to monitor security events effectively.
• Perform system hardening procedures on operating systems (Linux, Windows, macOS) and network devices to minimize vulnerabilities.
• Lead incident response efforts by investigating security breaches, conducting forensic analysis using tools like Nmap or Burp Suite, and coordinating incident recovery activities.
• Maintain compliance with regulatory frameworks such as PCI DSS and FISMA by executing vulnerability assessments and ensuring adherence to security controls.
• Support the deployment of cybersecurity tools including EDR solutions, VPNs, encryption protocols, and cloud security engineering practices to strengthen overall defense mechanisms., Join us as a Fractional Cybersecurity Specialist to make a meaningful impact by protecting vital digital assets while enjoying the flexibility of a part-time role! Your expertise will be instrumental in creating a secure environment that supports our innovative initiatives across diverse technological landscapes.

• Proven experience in cybersecurity roles with a focus on network security engineering, threat detection & response, or security assessment.
• Strong knowledge of computer networking concepts including routing protocols (OSPF, BGP), IP networking, TCP/IP stack, DHCP/DNS services.
• Hands-on experience with cybersecurity tools such as SIEM platforms (Splunk), vulnerability scanners (Nmap), intrusion detection systems (IDS), and endpoint detection & response (EDR).
• Familiarity with IT infrastructure components like SAN storage solutions, VMware virtualization environments (vSphere), and cloud architecture (AWS, Azure).
• Understanding of information security standards including ISO 27001/27002, NIST standards, DIACAP, COBIT frameworks for risk management and system security plans.
• Ability to perform vulnerability research and threat intelligence analysis to identify emerging risks proactively.
• Strong scripting skills in Python or Bash are preferred for automation tasks related to system security and incident management.