Cybersecurity Specialist

R.E. Darling is building a security program that’s practical, auditable, and aligned to customer and regulatory expectations. This hybrid role in Tucson, AZ supports a culture of diversity and inclusion, with benefits that help you stay healthy and plan ahead.

You will enforce and maintain governance across the organization’s security planning, compliance evidence, and training efforts. You will also coordinate key activities tied to CMMC and NIST 800-171
, while partnering with internal teams and external providers to keep the security posture current.

• Enforce governance to REDAR’s System Security Plan (SSP) and security policies, including auditing departments and processes for compliance to company security policies.
• Monitor and address current trends in cyber security requirements, including NIST 800-171 and CMMC updates.
• Provide user training for the System Security Plan and related policies, including Cyber Security training and Cyber Risk Awareness training
  , and maintain training media for cyber security,
  CUI
  , and risk awareness.
• Coordinate annual attestation and gather evidence/supporting documents for required controls under CMMC and NIST 800-171
  .
• Work with third‑party and external security services as required, including routinely reviewing monitoring notifications for cyber intelligence (as applicable).
• Provide governance to ensure compliance with legal and regulatory requirements, including customer dictated requirements, and monitor relevant FAR
  /
  DFAR clauses.
• Implement, retain, and oversee IT policies, processes, and systems required to satisfy CMMC (including NIST 800-171
  ) compliance.
• Collaborate with business units to develop and implement processes and procedures supporting regulatory and customer security requirements.
• Review and update the SSP and the Plan of Action and Milestones (POAM) to reflect current status for meeting and retaining CMMC certification.
• Support Supplier Performance Risk System (SPRS) data needs and follow up on supplier/vendor compliance questionnaires.
• Maintain and update security documentation, including the System Security Policy (SSP) and related security policies.
• Serve as a change agent for updating, communicating, and training users to revised SSP and related policy requirements.
• Support cyber security and resilience activities, including cyber security/disaster recovery and business continuity planning; ensure patches and updates to operating systems and clients are implemented; and ensure data backup, disaster recovery, and business continuity plans are current and documented.
• Oversee user access security policy, safeguard systems from physical harm and viruses, and coordinate appropriate security procedures with the technical team.
• Retain and support incident response plan activities and respond to and remediate threats in a timely manner.
• Actively monitor endpoints for suspicious activity, provide ongoing cyber threat awareness training, and deliver ongoing training on revisions to the REDAR Information Systems Security Policy (
  ISS
  ) and related policies.
• Collaborate with the Information Technology and Systems Manager to support requirements for qualification of cybersecurity insurance.
• Collaborate with technical leadership to implement proactive solutions to prevent threats as they become known.

• Bachelor degree in Computer Sciences
  , Information Systems
  , or a specialized cybersecurity program.
• Minimum three years
  ’ experience in monitoring and remediating cyber security threats.
• Minimum three years
  ’ experience in implementation and retention of corporate policies.
• Minimum three years
  ’ experience in training employees on cyber security policies and awareness.
• Minimum three years
  ’ experience in Windows server administration.
• Minimum…