Cybersecurity and Information Assurance Specialist

About the Role

We are seeking a detail-oriented Cybersecurity and Information Assurance Specialist to help protect organizational systems, networks, applications, and sensitive information. This role focuses on information security controls, risk assessments, compliance support, vulnerability management, and the implementation of security policies and procedures. The ideal candidate has a foundational understanding of cybersecurity principles, information assurance practices, and risk management. The successful candidate will collaborate with IT, compliance, and security teams to strengthen security controls, maintain documentation, and support the confidentiality, integrity, and availability of organizational information.

Key Responsibilities

• Assist with implementing and maintaining cybersecurity policies, standards, and procedures.
• Support information security risk assessments and identify potential vulnerabilities.
• Evaluate security controls to help ensure systems meet organizational requirements.
• Monitor security events and assist with investigating potential incidents.
• Support vulnerability management, remediation tracking, and risk mitigation activities.
• Help maintain information assurance documentation, reports, and security records.
• Assist with internal security audits and compliance assessments.
• Review system configurations and access controls for potential security weaknesses.
• Support security awareness training and information protection initiatives.
• Help ensure sensitive information is handled, stored, and transmitted securely.
• Collaborate with IT teams to implement security improvements.
• Assist with incident response documentation and follow-up activities.
• Track security findings and monitor corrective actions through completion.
• Research emerging cybersecurity threats, vulnerabilities, and industry best practices.
• Support business continuity, backup, and disaster recovery planning.
• Help prepare security metrics and reports for management review.
• Assist with evaluating third-party security documentation and vendor risks.
• Maintain awareness of applicable security frameworks and regulatory requirements.

Requirements & Tech Stack

• Foundational understanding of security principles, risk management, and access control.
• Familiarity with network security, endpoint protection, and system hardening.
• Basic knowledge of vulnerability assessment and security incident management.
• Understanding of confidentiality, integrity, and availability principles.
• Familiarity with security policies, procedures, and technical documentation.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work collaboratively with technical and non-technical teams.
• Strong attention to detail when handling sensitive information.
• Must be legally authorized to work in the United States.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field preferred.
• 0–3 years of experience in cybersecurity, IT risk management, information assurance, or a related area.
• Familiarity with NIST Cybersecurity Framework, NIST SP 800-53, ISO 27001, or CIS Controls.
• Knowledge of security and compliance frameworks such as SOC 2.
• Experience with security information and event management (SIEM) tools.
• Familiarity with vulnerability management and risk assessment tools.
• Understanding of security assessment and authorization processes.
• Relevant certifications such as CompTIA Security+, ISC2 Certified in Cybersecurity (CC), or SSCP.
• Experience with security audits, compliance reviews, or risk documentation.
• Familiarity with cloud security concepts and identity management.