-
Support cybersecurity operations through governance oversight, vulnerability result validation, and incident documentation. - Develop, maintain, and update security policies and procedures to ensure alignment with regulatory and operational requirements. - Evaluate implemented security controls, identify compliance gaps, and coordinate corrective actions with IT and Engineering to strengthen risk posture. - Manage audit readiness activities including evidence validation, organization, traceability, and direct support during formal assessments. - Track findings and remediation efforts through structured action plans and closure. - Participate in risk assessments and provide clear risk-based recommendations to leadership. - Support access control governance including least privilege and separation of duties. - Support security governance and compliance across cloud and on premises environments. - Maintain accurate documentation reflecting system configurations, ownership, and control implementation. - Ensure policies, procedures, and evidence accurately reflect operational practices and implemented controls. - Coordinate with IT, Engineering, Program Management, and Security leadership to ensure security initiatives are executed effectively. - Review and validate vulnerability and configuration assessment results to ensure findings are accurate, risk ranked, and mapped to applicable compliance controls. - Leverage ISSM aligned experience to support governance, audit preparation, and remediation tracking. - Support security awareness and training efforts aligned with organizational policies and procedures. - Performs other duties as assigned. Education and work experience requirements are:
-
Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field required. - Minimum of four (4) years of experience in a combination of risk management, information security, IT, and Cloud work experience. - Preferred experience:
-
Experience supporting CMMC readiness or formal audits. - Prior experience in an ISSM or equivalent security governance role. - Experience presenting risk, findings, or security posture to leadership. To be considered for this position, you would need to meet, at a minimum, the knowledge, skills, and abilities listed here:
-
CompTIA Security+ CE or ability to obtain within 6 months of start date. - Security qualifications a bonus – CISSP, CISM. - Demonstrated knowledge of RMF, NIST, NISPOM, system audits, vulnerability scanning, and DCSA security package development. - Experience working with NIST based frameworks and supporting control implementation. - Working knowledge of security technologies sufficient to assess control effectiveness, interpret findings, and validate compliance evidence. - Ability to review, assess, and communicate vulnerability findings and remediation recommendations. - Strong collaborative drive and interpersonal skills. - Strong initiative, proactive work ethic and prioritization skills. - Trustable judgement and analytical problem-solving skills. - Effective execution and decision making. - Champion of change and promotes innovation. - Strong written and verbal communication skills. The physical demands described here represent those that must be met in order to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable those with qualified disabilities. - Able to frequently sit, stand, walk, use hands to fingers, handle or feel, reach within hands and arm's length, stoop, kneel, and crouch, talk and hear. - Regularly required to sit for extended periods of time; frequently required to use office equipment such as PC, printer, telephone, etc. - Able to regularly lift and/or move up to 10 pounds, frequently lift and/or move up to 25 pounds, and occasionally lift and/or move up to 50 pounds. - Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus. Additional requirementsare:
-
Must be able to obtain and maintain an active Secret Clearance which requires U.S. Citizenship. - Active or recent (within 2 years) Security Clearance a plus. Note: Many of TrellisWare's positions require a security clearance or the ability to obtain one. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information.
