Senior Information Security Specialist

Senior Information Security Specialist ut the role Pemcco is seeking a highly skilled Senior Information Security Specialist to join our dynamic team in Washington, District of Columbia. This role is crucial in safeguarding our information systems and ensuring compliance with industry standards. As a Senior Information Security Specialist, you will be responsible for developing and implementing security measures to protect sensitive data and mitigate risks.

You will collaborate with various departments to enhance our security posture and respond to potential threats effectively.

• Location:
  
  Washington, District of Columbia
• Engagement:
  Full-time
• Salary:
  Competitive, commensurate with experience
• Visa:
  Sponsorship available for qualified candidates

• Design, implement, and maintain security protocols and policies to protect organizational data and systems from unauthorized access and breaches.
• Conduct regular security assessments and audits to identify vulnerabilities and recommend appropriate remediation strategies.
• Collaborate with IT teams to ensure that security measures are integrated into the system development lifecycle and operational processes.
• Monitor security incidents and respond promptly to any breaches or threats, conducting thorough investigations to determine the cause and impact.
• Develop and deliver training programs for employees on security best practices and awareness to foster a culture of security within the organization.
• Stay updated on the latest security trends, threats, and technologies to ensure that Pemcco remains compliant with industry regulations and standards.
• Prepare detailed reports for management regarding security incidents, risk assessments, and compliance status.
• Work closely with external vendors and partners to ensure that their security practices align with Pemcco's standards and requirements.
• Participate in the development of disaster recovery and business continuity plans to ensure operational resilience in the event of a security incident.
• Engage in cross-functional collaboration to assess the security implications of new projects and initiatives.
• Lead security-related projects and initiatives, ensuring timely delivery and adherence to budget constraints.
• Provide mentorship and guidance to junior security staff, fostering their professional development and enhancing the overall security team's capabilities.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 5 years of experience in information security or a related discipline, with a focus on risk management and compliance.
• Strong understanding of security frameworks and standards such as NIST, ISO 27001, and CIS Controls.
• Proven experience with security tools and technologies, including firewalls, intrusion detection systems, and encryption methods.
• Familiarity with regulatory requirements such as GDPR, HIPAA, and PCI-DSS.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Strong communication skills, both written and verbal, to effectively convey security concepts to technical and non-technical stakeholders.
• Relevant security certifications such as CISSP, CISM, or CEH are highly desirable.

• Experience with cloud security and securing cloud-based applications and services.
• Knowledge of programming languages such as Python or Java for security automation tasks.
• Familiarity with incident response frameworks and methodologies.
• Experience in conducting penetration testing and vulnerability assessments.
• Understanding of emerging technologies such as AI and machine learning in the context of cybersecurity.

• Proficient in security information and event management (SIEM) tools.
• Experience with endpoint protection and network security solutions.
• Familiarity with identity and access management (IAM) systems.
• Knowledge of data loss prevention (DLP) technologies.
• Strong understanding of encryption technologies and secure coding practices.

• This position is based in Washington, DC, and may require occasional travel for training or conferences.
• The selected candidate will be expected to work collaboratively in a team-oriented environment while also being able to work independently.

Pemcco values diversity and encourages applications from individuals of all backgrounds.