Information Security Senior Specialist

Job Title: Information Security Senior Specialist

Duration: 6+ Months

Rate: $65/hr on Vendor W2

Location: Hybrid Role – 3 Days/Week Onsite – Cary, North Carolina

The Information Security Senior Specialist is responsible for helping protect the organization’s information systems, IT assets, and intellectual property from cyber threats, unauthorized access, misuse, disclosure, or destruction. This role focuses on ensuring security procedures, policies, and processes are effectively implemented, aligned with stakeholders, and support the organization’s broader security strategy.

• Identity & Access Management (IAM)
• Information Security Operations
• Information Security Technology

• Identify and assess potential information security risks, including evaluating likelihood and business impact while implementing appropriate mitigation strategies
• Support and contribute to the organization’s Information Security strategy and initiatives
• Evaluate the effectiveness of internal security controls and risk management processes
• Ensure security procedures, policies, and processes are properly documented, maintained, and aligned with stakeholder requirements
• Develop and implement practical security strategies and controls across the organization
• Partner with internal stakeholders and leadership to support security objectives and maintain focus on the information security agenda

• Audit or implementation experience related to Identity & Access Management (IAM) concepts and controls
• Strong understanding of:
  • Authentication
  • Access management and access controls
  • Least privilege principles
  • Segregation of Duties (SoD)
  • Access certifications/recertifications
  • Privileged Access Management (PAM)
• Knowledge of security frameworks and regulatory standards, including:
  • ISO 27001 / ISO 27002
  • NIST
  • SOX
  • SOC 1 / SOC 2
  • GDPR
• Experience with IAM and PAM technologies such as:
  • Active Directory
  • Azure AD / Entra
  • Cyber Ark
• Experience supporting Joiner/Mover/Leaver (JML) automation processes integrated with HR systems
• Familiarity with role-based or policy-based access models that enforce least privilege and approved access paths
• Understanding of Single Sign-On (SSO) and Multi-Factor Authentication (MFA) controls

• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)

Interested candidates send your resume to