LEAD IT SPECIALIST - SR. IT SPECIALIST - IT Auditor/Governance Analyst
Apply NowCompany: Southwest Research Institute (SwRI)
Location: San Antonio, TX 78201
Description:
- Conduct internal compliance assessments against industry frameworks and security policy.
- Manage the IT risk program.
- Assist leadership in authoring and updating policies.
- Exception and policy deviation processing.
- Manage cyber metrics and reporting.
- Evaluating the Institute's compliance with cybersecurity internal controls and industry frameworks.
- Support audit functions by interpreting of control requirements and gathering artifacts.
- Author and track Plans of Actions and Milestones to bring security controls into compliance.
- Support risk management activities by operating the Institute's IT risk management process.
- Assist in developing training, standards, and guidance to support cyber governance processes.
- Evaluate policy exception requests and make recommendations to the CISO regarding risk reduction and approval.
- Requires a Bachelors degree in Cybersecurity, Computer Science, Management Information Systems, Computer Information Systems or related degree field.
- Certified Information Systems Auditor (CISA) strongly desired.
- 6 years: Experience understanding and implementing information security standards, E.g., NIST 800-171 or 800-53, CIS Critical Security Controls.
- 3 years: Experience auditing IT controls environments or conducting compliance assessments (PCI, SOX, RMF, DFARS, NIST).
- 2 years: Exposure to/understanding of the fundamentals of network and systems administration .
- 2 years: General IT systems administration, development, or support.
- A valid/clear driver's license is required.