Top Engineering Executive jobs in Albuquerque, NM

Due to Federal Government regulations to acquire a security clearance US Citizenship is required 


Position Overview: The Information Systems Security Officer (ISSO) will be responsible for implementing and maintaining the cybersecurity program, policies, and procedures to protect the organization's information systems and data assets. This role requires a strong understanding of cybersecurity principles, regulatory requirements, and best practices, as well as the ability to collaborate effectively with internal stakeholders and external partners.

Key Responsibilities:

1. Cybersecurity Program Management:

   • Develop, implement, and manage the organization's cybersecurity program in accordance with industry standards, regulatory requirements, and best practices.
   • Conduct regular risk assessments, vulnerability scans, and security audits to identify and mitigate cybersecurity risks and threats.

2. Policy and Procedure Development:

   • Develop and maintain cybersecurity policies, procedures, and guidelines to establish and enforce security standards across the organization.
   • Ensure compliance with applicable laws, regulations, and industry standards (e.g., NIST, ISO/IEC, GDPR) related to information security.

3. Security Controls Implementation:

   • Implement and manage security controls and technologies to safeguard information systems, networks, and data assets against unauthorized access, disclosure, and modification.
   • Monitor and analyze security events, alerts, and logs to detect and respond to security incidents and breaches in a timely manner.

4. Security Awareness and Training:

   • Develop and deliver cybersecurity awareness and training programs for employees to promote a culture of security awareness and compliance.
   • Provide guidance and support to employees on security best practices, policies, and procedures.

5. Incident Response and Investigation:

   • Develop and maintain an incident response plan and coordinate incident response activities in collaboration with relevant stakeholders.
   • Conduct investigations into security incidents, breaches, and violations, and implement remediation measures to prevent recurrence.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field; advanced degree or relevant certifications (e.g., CISSP, CISM, CISA) is preferred.
• 5 years of experience in information security roles, with a strong understanding of cybersecurity principles, practices, and technologies.
• Experience with risk management, vulnerability assessment, and security control implementation.
• Knowledge of relevant laws, regulations, and standards (e.g., GDPR, HIPAA, PCI DSS, NIST Cybersecurity Framework).
• Excellent communication, presentation, and interpersonal skills, with the ability to communicate effectively with technical and non-technical stakeholders.
• Strong analytical and problem-solving skills, with the ability to analyze complex security issues and recommend effective solutions.