Job Responsibilities

• Manage CirrusMD’s cybersecurity program to keep pace with changes in the overall threat landscape.

• Act as information security lead for IT and business project teams to identify potential threats and offer solutions and technologies in support.

• Support third-party assessments of critical security controls for the company’s cloud-based applications and and manage remediation tasks

• Work with internal and external compliance, infrastructure and application development teams to ensure GRC initiatives are aligned and advancing with business objectives

• Support sales and customer enablement activities including RFP responses, contract negotiations or client-led security assessments.

• Manage audit and compliance testing, documentation, and follow-up.

• Maintain an evolving security awareness program to address common vulnerabilities (OWASP) and emergent threats.

• Monitor the enterprise IT threat landscape, devising cybersecurity policy and controls to reduce risk, leading auditing and compliance initiatives, and more.

• Oversee a variety of security policy domains associated with GRC, incident response and management, HR management, and additional domains.

• Coordination with the Federal Compliance team to support government agencies