Information Assurance Advisor

NuHarbor Security•Burlington, VT

16h•$100,000 - $125,000

About The Position

Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand. Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders. We’re growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission. The Information Assurance Advisor is responsible for providing tailored consulting to clients and is experienced in the field of Information Assurance. This position acts as an advisor on Information Assurance client engagements, leads services initiatives and provides quality assurance across engagements and deliverables. They help provide mentoring and guidance to other analysts and ensures we provide excellent services to our clients. They are responsible for advising clients, assisting management and other technical leaders on implementing strategic goals and imperatives.

Requirements

Bachelor’s Degree and five (5) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications. In lieu of a degree, seven (7) years of experience in a related technology field and relevant industry certifications are required.
Two (2) years of experience leading Information Assurance projects including: informationsecurity risk assessments, security frameworks assessments development of security policies and procedures.
Holds at least one relevant professional level industry accredited certifications such as a CISSP, CCSP, CISM, CISA, CRISC etc.
Demonstrated interpersonal savvy and ability to present and communicate with a variety of client stakeholders.
Knowledgeable about the latest Information Security trends, threats, and technologies and the impacts upon an Information Security Program.
Experience mentoring and guiding coworkers to ensure excellent services are presented to clients.
Proficiency working on independent engagements as well as within a team setting.
Mastery of both written and verbal communication skills with strong presentation abilities.
Ability to manage, delegate and prioritize multiped concurrent tasks and projects.
Ability to perform effective research and analysis through interviews and documentation review.
Ability to provide creative and strategic recommendations that result in a stronger cybersecurity program.
Extensive knowledge of security and risk frameworks relevant to State, Local Government, higher education, and commercial organizations.
Must be a citizen of the United States.

Nice To Haves

Security frameworks such as NIST 800-53, ISO 27001, PCI DSS, CMMC and HIPAA.
Experience leading Incident Response Tabletop Exercises.
Consulting and application of Information Assurance industry standards and best practices.
Security risk remediation planning and strategy development.
Providing advisory and planning services such as security program strategic planning and roadmap development.

Responsibilities

Serve as an Information Assurance advisor on ongoing and project-based client engagements and internal strategic projects.
Lead and execute on Information Assurance client engagements and act as a first-level escalation point of contact on client engagements and projects.
Leads engagement scoping activities and discovery sessions with clients to generate accurate presales documentation and statements of work.
Responsible for the quality and delivery of service deliverables on client engagements.
Responsible for coaching other Information Assurance junior analysts on consultative and advisory company standards for client-based engagements.
Advise and consult on security program development, compliance and strategic planning, framework adoption.
Authorize and create templates for security policies, standards, and procedures.
Establish and execute against a project plan for client consulting engagements that have less defined deliverables.
Ensure advisory methodologies are incorporated into Information Assurance services.
Communicate and present to executive level client stakeholders.
Maintain industry recognized certifications.
Able to effectively execute on all types of Information Assurance services.
Implement and develop techniques and procedures for conducting IT and cyber security assessments based on company and industry standards.
Develop tools, processes, and templates for new or existing Information Assurance service delivery.
Ensure client success and customer satisfaction on client engagements based on contract metrics.
Develop recommendations and enhancements to mature a client’s cybersecurity program.