AL - DHR - Sr. Cyber Security Operations Lead

AgreeYa Solutions•Montgomery, AL

31d•Onsite

About The Position

AgreeYa is a global Systems Integrator and is seeking an experienced Business Analyst to join our growing team. Description The Cyber Security Engineer identifies threats and vulnerabilities in systems and software and then applies their skills to developing and implementing high-tech solutions to defend against hacking, malware and ransomware, insider threats, and all types of cybercrime. AgreeYa is a global systems integrator delivering competitive advantage for its customers through software, solutions, and services. Established in 1999, AgreeYa is headquartered in Folsom, California, with a global footprint and a team of more than 2,200 staff across offices. AgreeYa works with 500+ organizations ranging from Fortune 100 firms to small and large businesses across industries such as Telecom, Banking, Financial Services & Insurance, Healthcare, Utility & Energy, Technology, Public sector, Pharma & Biotech, and others. AgreeYa is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, gender identity, sexual orientation, national origin, disability, veteran status or other protected characteristics. Visit our website to learn about our Career & Culture.

Requirements

Bachelor's degree in a relevant field.
7-10 years of experience in information security or a related field, including leadership roles.
Hands-on experience in risk management, incident response, vulnerability assessment, and security architecture.
Strong knowledge of infrastructure systems is a plus.
Familiarity with NIST standards is a plus but not required.
Relevant certifications in cybersecurity are a plus (e.g., CISSP, CISM, CISA).
Familiarity with technologies such as Splunk, SolarWinds, and Azure Arc is desirable.
Firewall knowledge is a plus.

Responsibilities

Develop and Oversee Security Programs
Create and maintain an agency-wide IT security program.
Ensure alignment with applicable regulations and industry best practices.
Running point on all incident response.
Policy and Compliance
Develop and enforce security policies, procedures, and control techniques.
Ensure compliance with directives from the Office of Information Technology, Internal Revenue Service (IRS), Social Security Administration (SSA), and agency-specific requirements.
Risk Management
Assess risks to information systems and data.
Implement cost-effective measures to reduce risks to acceptable levels.
Incident Response
Detect, report, contain, and mitigate cybersecurity incidents.
Coordinate incident response efforts with the Agency's Safeguards Coordinator and federal entities like the IRS and SSA.
Continuous Monitoring
Oversee automated and continuous monitoring of systems for vulnerabilities and threats.
Strategic Integration
Ensure security processes are integrated into strategic, budgetary, and operational planning.
Collaboration
Work closely with the Agency CIO, senior deputies, and staff to enhance security measures.
Participate in inter-agency councils, such as the OIT Security Council, to align security strategies.