Cybersecurity Specialist

R.E. Darling Company Inc.•Tucson, AZ

1d•Hybrid

About The Position

The Cyber Security & Compliance Specialist enforces governance for REDAR’s System Security Plan (SSP) and policies, audits departments and processes for compliance, monitors evolving cybersecurity requirements, and delivers user training on security policies, cybersecurity, and risk awareness. The role also works with third-party security services as needed. The position supports compliance with legal, regulatory, customer, CMMC, and NIST 800-171 requirements. It maintains the SSP and related policies, coordinates annual attestations and supplier compliance follow-up, prepares compliance evidence and SPRS data, and works with CMMC ecosystem resources to attain or retain certification. The specialist supports cybersecurity, disaster recovery, and business continuity planning; monitors endpoint activity and responds to threats; coordinates with external cybersecurity providers and internal IT and technical support managers; and oversees user access security, system updates, incident response planning, and employee security education. The position works under minimal supervision and has no supervisory responsibilities. This is a regular full-time position averaging 40 hours per week on a 9/80 schedule. The role requires on-site presence at REDAR’s Tucson, Arizona office and is eligible for a hybrid schedule, with an expectation of working in the office twice per week. Minimal travel is required, and the employee is expected to be on call outside core hours as the primary contact for cyber incident responses.

Requirements

Bachelor’s degree in Computer Sciences, Information Systems, or a specialized cybersecurity program.
At least three years of experience monitoring and remediating cybersecurity threats.
At least three years of experience implementing and retaining corporate policies.
At least three years of experience training employees on cybersecurity policies and awareness.
At least three years of Windows Server administration experience.
At least three years of Microsoft Entra ID administration experience.
At least three years of Microsoft Office 365 and Exchange administration experience.
Previous experience with NIST 800-171 compliance or equivalent is required.
Strong organizational and analytical skills, attention to detail, and knowledge of current compliance requirements.
Good communication skills and the ability to work diplomatically and skillfully with all levels of the organization.
Ability to work under minimal supervision.
Availability to be on call outside core hours as the primary contact for cyber incident responses.
Ability to work on-site at the Tucson, Arizona office twice per week under the hybrid schedule.

Nice To Haves

Previous employment with a Department of Defense contractor.

Responsibilities

Provide governance to ensure compliance with legal, regulatory, and customer requirements, including CMMC and NIST 800-171.
Implement and retain IT policies, processes, and systems required for CMMC compliance.
Collaborate with business units to develop and implement processes and procedures supporting security requirements.
Provide evidence and supporting documents for CMMC and NIST 800-171 requirements and provide data for SPRS.
Review and update the System Security Plan and Plan of Action and Milestones to reflect current requirements and certification status.
Work with CMMC ecosystem resources to attain or retain CMMC certification.
Coordinate annual attestations and follow up on supplier/vendor compliance questionnaires.
Monitor CMMC-related FAR/DFAR clauses and current cybersecurity compliance requirements.
Develop and execute audits of departments and users for compliance with company security policies.
Maintain and update REDAR’s System Security Plan and related security policies; communicate changes and train users on revised requirements.
Support cybersecurity, disaster recovery, and business continuity planning, including retaining an incident response plan and keeping backup and recovery plans documented and current.
Apply security best practices, including least-privilege access, and oversee user access security policy.
Stay informed about current and emerging threats and cybersecurity requirements, including through training, conferences, and trade shows.
Retain external cybersecurity services and routinely review their monitoring notifications and cyber intelligence.
Collaborate with the Information Technology & Systems Manager on cybersecurity insurance qualification requirements and with IT and technical support managers on proactive threat-prevention solutions.
Oversee company communications and education about ongoing threats and risks.
Ensure operating system and client patches and updates are implemented.
Collaborate with the Technical Support Manager on procedures to protect systems from physical harm, viruses, unauthorized users, and data damage.
Develop and maintain training materials and train employees on cybersecurity requirements, CUI, risk awareness, and company security policies during onboarding, annually, and on an ongoing basis.
Actively monitor endpoints for suspicious activity and respond to and remediate threats in a timely manner.
Work with contracted external cybersecurity providers and the technical support team as required.