Cybersecurity Specialist

R.E. Darling Co.•Tucson, AZ

13d•Hybrid

About The Position

The Cyber Security & Compliance Specialist enforces governance of REDAR’s System Security Plan and policies, audits departments and processes for compliance, monitors current cybersecurity requirements, and provides training on the System Security Plan, related policies, cybersecurity, and cyber risk awareness. The specialist also works with third-party security services as needed. The role supports compliance with legal, regulatory, customer, CMMC, and NIST 800-171 requirements. This includes maintaining the System Security Plan and related policies, supplying evidence and SPRS data, coordinating annual attestations, monitoring supplier compliance and relevant FAR/DFAR clauses, and working with CMMC ecosystem resources to attain or retain certification. The specialist oversees security awareness and training, monitors endpoints and external security notifications, responds to and remediates threats, and collaborates with IT and technical support teams on patches, access controls, cybersecurity insurance, incident response, backup and recovery, and business continuity. The position works under minimal supervision and has no supervisory responsibilities. This is a regular full-time position averaging 40 hours per week on a 9/80 schedule. Core hours are Monday–Thursday, 7:00 AM–4:30 PM, and working Fridays, 7:00 AM–3:30 PM, with every other Friday off. The employee is expected to be on call outside core hours as the primary contact for cyber incident responses. The role requires an on-site presence at REDAR’s Tucson, Arizona office and is eligible for a hybrid schedule, with an expectation of being in the office twice per week. Travel requirements are minimal.

Requirements

Bachelor’s degree in Computer Sciences, Information Systems, or a specialized cybersecurity program.
At least three years of experience monitoring and remediating cybersecurity threats.
At least three years of experience implementing and retaining corporate policies.
At least three years of experience training employees on cybersecurity policies and awareness.
At least three years of Windows server administration experience.
At least three years of Microsoft Entra ID administration experience.
At least three years of Microsoft Office 365 and Exchange administration experience.
Previous experience with NIST 800-171 compliance or equivalent is required.
Strong organizational and analytical skills, attention to detail, and knowledge of current compliance requirements.
Good communication skills and the ability to work diplomatically and skillfully with all levels of the organization.
Ability to work under minimal supervision.
Availability to be on call outside core hours as the primary contact for cyber incident responses.
Ability to work on site in Tucson, Arizona twice per week under the hybrid schedule.

Nice To Haves

Previous employment with a Department of Defense contractor is preferred.

Responsibilities

Provide governance to ensure compliance with legal, regulatory, and customer requirements.
Implement and retain IT policies, processes, and systems required for CMMC and NIST 800-171 compliance.
Collaborate with business units to develop and implement processes and procedures supporting security requirements.
Provide evidence and supporting documentation for CMMC and NIST 800-171 requirements, and provide data for SPRS.
Review and update the System Security Plan (SSP) and Plan of Action and Milestones (POAM).
Work with CMMC ecosystem resources to attain or retain CMMC certification.
Coordinate annual attestations, follow up on supplier/vendor compliance questionnaires, and monitor CMMC-related FAR/DFAR clauses.
Develop and execute processes to audit departments and users for compliance.
Maintain and update REDAR’s System Security Plan and related security policies; communicate revisions and train users on updated requirements.
Stay current on cybersecurity threats and requirements, including NIST 800-171 and CMMC developments.
Retain external cybersecurity services and routinely review their monitoring notifications and cyber intelligence.
Collaborate with the Information Technology & Systems Manager on cybersecurity insurance requirements, patches and updates, backups, disaster recovery, and business continuity planning.
Collaborate with the Information Technology & Systems Manager and Technical Support Manager on proactive threat-prevention solutions.
Oversee company communications and education about ongoing threats and risks.
Oversee user access security policy and promote least-privilege access.
Collaborate with the Technical Support Manager to develop and oversee procedures protecting systems and data from physical harm, viruses, unauthorized users, and damage.
Maintain an incident response plan.
Provide cybersecurity, CUI, risk awareness, and IT policy training during onboarding, annually, and on an ongoing basis.
Develop and maintain training materials for cybersecurity requirements, CUI, and risk awareness.
Actively monitor endpoints for suspicious activity and respond to and remediate threats in a timely manner.
Work with contracted external cybersecurity providers, the Technical Support Manager, and the technical team as required.