Cybersecurity Specialist

Overview

The Cybersecurity Specialist will play a crucial role in advancing the CDC Foundation's mission by safeguarding the digital assets, data, and systems of a public health organization from cyber threats and attacks. This role is aligned to the Workforce Acceleration Initiative (WAI). WAI is a federally funded CDC Foundation program with the goal of helping the nation’s public health agencies by providing them with the technology and data experts they need to accelerate their information system improvements.

Working within Southern Plains Tribal Health Board and the Oklahoma Area Tribal Epidemiology Center, the Cybersecurity Specialist will develop security measures and protocols to protect computer systems and networks from unauthorized access, data breaches, and other cyber attacks. Survey current system vulnerabilities to identify infrastructure needs. Monitor system security, develop the protocol to manage encryption, perform routine vulnerability scans, and maintain compliance with HIPAA and federal security standards.

Coordinate security training and incident response.

Strong technical skills are required in areas such as network security, encryption, intrusion detection, and incident response, as well as knowledge of regulatory compliance requirements. Excellent communication and collaboration skills are crucial for effectively liaising with partners and maintaining a proactive approach to cybersecurity.

The Cybersecurity Specialist will be hired by the CDC Foundation and placed with the Southern Plains Tribal Health Board administrative team’s IT department. This position is eligible for a fully remote work arrangement for U.S. based candidates.

• Perform security testing and analysis, including vulnerability assessment, code reviews, business logic exploit testing, and implementation of automated cloud-based security frameworks. Automate infrastructure security testing and penetration testing.
• Identify, analyze and correct security related issues.
• Utilize advanced tools and techniques to detect and analyze potential cybersecurity threats and vulnerabilities across the organization's network, systems and applications.
• Monitor security events and alerts in real-time, investigate potential security incidents, and respond promptly to mitigate threats and minimize impact.
• Conduct regular vulnerability assessments and penetration testing to identify weaknesses in the organization's infrastructure, prioritize remediation efforts, and ensure systems are adequately protected.
• Collaborate with technical teams to design and implement robust security architectures that align with business goals and industry best practices, incorporating elements such as firewalls, intrusion detection systems and encryption.
• Develop and maintain cybersecurity policies, procedures, and standards, ensuring compliance with relevant regulations and industry frameworks. Enforce security policies through education, training and regular audits.
• Develop and maintain incident response plans and playbooks, outlining procedures for effectively responding to security incidents, including containment, eradication and recovery efforts.
• Provide cybersecurity awareness training to employees, contractors, and other partners to promote a culture of security and empower individuals to recognize and respond to potential threats.
• Conduct comprehensive risk assessments to identify and prioritize security risks to the organization's assets and data, collaborating with partners to develop and implement risk mitigation strategies.
• Ensure compliance with relevant regulatory requirements, industry standards, and contractual obligations related to cybersecurity, maintaining documentation and evidence of compliance efforts.
• Evaluate the security posture of third-party vendors and service providers, assessing their ability to protect sensitive data and mitigate security risks effectively.
• Prepare and present regular reports on security incidents, trends, and metrics to senior management and partners, providing insights into the organization's security posture and areas for improvement.
• Up to 10% travel may be required.

• Bache…