SwRI’s cybersecurity mission is to secure the enterprise by evaluating, implementing, and operating a full suite of cybersecurity tools, services, and processes.
- Compliantly pursue selection, acquisition, and maintenance of technologies.
-
Apply cybersecurity frameworks and policies across the Institute and provide opportunities for remediations.
-
Raise awareness of cyber risks to the Institute through the application of the risk assessment process and report to leadership for risk mitigation.
-
Propose, generate, and review security metrics to demonstrate security progress and opportunities for improvement.
-
Assist in contract review and third-party risk.
- Evaluating the Institute’s compliance with cybersecurity internal controls and industry frameworks.
-
Authoring and tracking Plans of Actions and Milestones to bring security controls into compliance.
-
Support risk management activities by operating the Institute’s IT risk management process.
-
Assist in developing training, standards, and guidance to support cyber governance processes.
-
Evaluating policy exception requests and make recommendations to the CISO regarding risk reduction and approval.
- Requires a Bachelors degree in Cybersecurity, Information Technology, or related degree with relevant experience. In lieu of a Bachelors degree, 6 years of Cybersecurity and/or IT administration experience an Associates degree or high school education or equivalent and related certifications is required.
-
Certified Information Systems Security Professional (CISSP) preferred.
-
3 years: Experience auditing IT controls environments or conducting compliance assessments
-
3 years: Experience in any of various IT and security functions (E.g., IT audit, cybersecurity, IT administration, programming, contracts management, IT GRC) is desirable
-
3 years: Knowledge of information security standards, E.g., NIST 800-171 or 800-53, CIS Critical Security Controls
-
3 years: Exposure to/understanding of the fundamentals of network and systems administration (e.g., Windows Server and desktop, Linux, TCP/IP, network subnetting)
-
A valid/clear driver's license is required.
Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Applicant must be a U.S. citizen.
An Equal Employment Opportunity Employer: race, color, religion, sex, national origin, disability, and veteran status.
