As a cybersecurity project-based consultant, you will leverage your expertise in cybersecurity and familiarity with established frameworks like NIST standards and regulations such as FERPA and GLBA to conduct technical assessments and CIS assessments. Your primary objective will be to identify potential vulnerabilities and weaknesses in IT systems, networks, and applications within higher education institutions. Based on your findings, you will provide comprehensive recommendations to enhance their overall security posture.
Responsibilities
- Conduct technical assessments of an institution's IT systems, networks, and applications to identify potential vulnerabilities and weaknesses.
- Provide findings and recommendations to stakeholders in a clear, concise manner.
- Work collaboratively with IT team to address ongoing risk assessments and audits to ensure that client security measures are effective and meet regulatory requirements.
- Collaborate with other cybersecurity professionals to ensure a coordinated response to security incidents.
- Assist in the development and implementation of security policies, procedures, and training programs that align with current best practices.
Qualifications & Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, related field, or equivalent experience.
- 3-5 years of experience in a cybersecurity-related role, such as a CISO, security analyst, penetration tester, or IT auditor.
- Experience in Higher Education is strongly preferred.
- Experience working with industry-standard security frameworks such as NIST or CIS.
- Professional certifications such as CISSP, CISM, CISA, or GIAC are preferred.
- Demonstrated ability to stay current on common exploitations, attack vectors, and techniques used by cybercriminals and threat actors.
- Advanced technical skills in using specialized security tools and technologies to conduct assessments in hybrid technical environments.
- Knowledge of applicable regulations, such as FERPA, GLBA, PCI DSS, and HIPAA.
- Knowledge of vulnerability assessment and penetration testing methodologies. Strong analytical and problem-solving skills to identify and assess potential security risks.
- Excellent written and verbal communication skills to clearly and concisely present findings and recommendations to technical and non-technical audiences.
- Ability to work independently and manage multiple tasks and priorities effectively and meet tight deadlines.
- Strong leadership skills to manage and mentor junior team members.
