Senior Cyber Security Specialist

Overview

Expanding and maturing cyber security program to strengthen organizational security posture, protect sensitive data, and improve operational resilience against evolving cyber threats. The program focuses on enhancing capabilities across Cloud Security, Vulnerability Management, Security Operations, Incident Response, Threat Intelligence, Security Architecture, Compliance, Risk Management, and Security Awareness. The Senior Cyber Security Specialist will support the delivery and continuous improvement of enterprise cyber security initiatives aligned with industry best practices and public sector security expectations.

• Support development and continuous improvement of enterprise cyber security programs
• Design and implement cloud security controls and secure cloud architectures (Azure preferred)
• Support SOC operations including monitoring, detection, investigation, and response activities
• Coordinate and support incident response lifecycle activities
• Support vulnerability management including scanning, remediation tracking, and reporting
• Conduct cyber risk assessments and recommend mitigation strategies
• Support development of cyber security policies, standards, and governance processes
• Coordinate cyber security projects, stakeholders, vendors, and service providers
• Support compliance initiatives, audits, and security assessments
• Evaluate and support implementation of cyber security tools and technologies
• Produce cyber security reporting, KPIs, metrics, and risk dashboards
• Support security awareness and training initiatives
• Provide security architecture guidance for enterprise systems and IT projects
• Provide after-hours support during security incidents when required

• 7+ years of hands-on cyber security experience
• Robust experience in:
  Security Operations;
  Security Architecture;
  Security Assurance Activities
• Experience designing and securing cloud environments (Azure preferred)
• Experience with vulnerability management and remediation processes
• Robust understanding of cyber risk management frameworks and threat assessments
• Knowledge of security frameworks including: NIST 800-53; ISO 27001; CIS Controls
• Experience with SOC audits and compliance activities (SOC 2 Type II preferred)
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, Diamond Model, and IOCs
• Solid project coordination and stakeholder management experience
• Strong business analysis, documentation, and communication skills