IT Risk Compliance Director (Tallahassee, FL)
Job description
Job Title: IT Risk Compliance Director Job Location: Tallahassee, FL (on-site) Job Duration: 12 month contract Job Tasks and Activities:
- Conduct comprehensive vulnerability assessments using industry-standard tools and methodologies.
- Perform penetration testing using a structured approach progressing from passive to active techniques.
- Identify and analyze Indicators of Compromise (IOCs), unauthorized access attempts, and data exfiltration risks.
- Manage misconfigurations and insecure network services.
- Apply and interpret Common Vulnerability Scoring System (CVSS) for risk prioritization.
- Conduct threat hunting activities to detect active or persistent threats within enterprise environments.
- Provide incident response support, including containment, eradication, and recovery recommendations.
Required Experience:
- Demonstrated experience providing cybersecurity services for large, complex enterprise environments, preferably within government or criminal justice agencies.
- Proven track record delivering threat hunting, vulnerability assessments, penetration testing (internal and external), and incident response services.
- Experience supporting environments subject to Criminal Justice Information Services (CJIS) Security Policy requirements.
- Ability to provide advisory services, including cybersecurity strategy, governance, risk, and compliance (GRC), and remediation planning.
- Minimum five (5) or more years of hands-on cybersecurity experience in one or more of the following: threat hunting and threat intelligence, penetration testing and ethical hacking, vulnerability management, and Incident response and digital forensics.
- Demonstrated experience operating in both offensive security roles (e.g., red team, penetration testing) and defensive security roles (e.g., Security Operations Center [SOC], blue team, and incident response).
Preferred Experience:
- Experience conducting red team and adversarial simulation exercises.
- Ability to support cybersecurity roadmap development and maturity assessments.
- Relevant industry certifications are preferred, such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), Global Information Assurance Certification (GIAC), Certified Information Security Manager (CISM), and Certified Information Systems Auditor (CISA).
- Experience integrating with client Managed Service Providers (MSPs) and internal IT teams.
Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support. Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals.To learn more, please visit https://dexian.com/. Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.
|