Cyber Security Engineer

Headquartered in Hudson, OH, CEIA USA is a world leading manufacturer of security screening equipment, specializing in the design, engineering and production of a complete range of devices including:
Walk‑Through, Hand‑Held, Table‑Top and Ground Search Metal Detectors, Bottled Liquid Scanners, Non‑Metallic Cargo Inspection and Loss Prevention Systems.

CEIA USA provides nationwide sales, service and customer support to public (federal, state and local governments) and private sector customers in North America. Dynamic solutions are the foundation of CEIA USA's commitment to customer satisfaction.

The Cyber Security Analyst is responsible for driving the organization's cybersecurity governance, compliance, and continuous security improvement initiatives. This role serves as the primary owner of cybersecurity monitoring, security program maturity, regulatory compliance, and risk management while partnering closely with Infrastructure, IT Operations, Engineering, and business stakeholders to strengthen the organization's overall security posture. This position requires a strong technical understanding of enterprise networks, infrastructure, and security technologies to effectively monitor risks, evaluate controls, identify vulnerabilities, and recommend practical improvements.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Lead the end-to-end process of achieving and maintaining Company cyber security certifications, including CMMC, SOC 2, and ISO 27001.
• Conduct regular internal assessment and gap analyses against these frameworks to identify security deficiencies and develop remediation plans.
• Author, review, and maintain the company’s security policies, procedures, and System Security Plans (SSP) to ensure they align with current and future relevant standards.
• Monitor changes to applicable cyber security standards and recommend updates to organizational policies, controls, and practices.
• Serve as the primary point of contact for external cyber security audits, coordinating audit readiness, evidence collection, and remediation activities.
• Serve as the primary point of contact for customer security questionnaires, due diligence requests, and security‑related inquiries.
• Develop and execute a vendor security assessment program to evaluate the security posture of all third‑party providers and subcontractors.
• Review SOC reports, ISO certifications, and security questionnaires from providers to ensure they meet the company's security requirements, and work with vendors to remediate identified security gaps and maintain a risk register.
• Work collaboratively with vendors to address identified security gaps and maintain an enterprise vendor risk register.

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Computer Engineering, or a related discipline.
• Equivalent professional experience may substitute for formal education.
• 5+ years of cybersecurity experience.
• Proven track record of successfully leading an organization through one of the main established cyber security frameworks, like SOC 2 Type II, ISO 27001, or CMMC.
• Experience implementing a Risk Management Framework (RMF) to identify, assess, and mitigate organizational risk.
• Deep understanding of the specific requirements of the CMMC levels.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and collaboratively.
• Ability to manage multiple priorities in fast‑paced environments.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

• Professional cyber security certifications are preferred.

This job operates in a professional office environment. This role routinely uses standard office equipment. The physical demands described here are representative of…