Required Skills & Experience
Required Qualifications Strong experience in IT security, cybersecurity remediation, governance, risk, and compliance (GRC), or information security. Demonstrated experience supporting SOC 2 Type II and ISO 27001 compliance initiatives. Familiarity with FedRAMP requirements and security controls. Experience with network security, segmentation, SIEM/log management, vulnerability management, encryption, MFA, and identity security. Understanding of business continuity, disaster recovery, and enterprise risk management. Experience collecting, organizing, and maintaining audit evidence and security documentation. Ability to translate security findings into actionable remediation plans and work cross-functionally to drive issues through closure. Strong project leadership, documentation, communication, and stakeholder management skills.
Nice to Have Skills & Experience
Preferred Qualifications Experience working with NIST 800-53, NIST Cybersecurity Framework, or CIS Controls. Certifications such as CISSP, CISM, CRISC, Security+, ISO 27001 Lead Implementer/Auditor, or CISA. Experience working in highly regulated or government-facing environments.
Job Description
We are seeking an experienced IT/Cybersecurity Remediation Lead to lead security remediation initiatives across the organization. This individual will be responsible for identifying, prioritizing, and resolving cybersecurity and compliance gaps while strengthening the company’s overall security posture. The ideal candidate will have hands-on experience supporting SOC 2 Type II and ISO 27001 compliance, with familiarity with FedRAMP requirements. This role will partner closely with IT, Security, Risk, Compliance, and business stakeholders to remediate vulnerabilities, implement security controls, and maintain audit-ready documentation.
Key Responsibilities
Lead the identification, prioritization, tracking, and remediation of cybersecurity, IT risk, and compliance findings. Support SOC 2 Type II and ISO 27001 readiness, remediation, and ongoing compliance efforts. Apply knowledge of FedRAMP security requirements and control frameworks when evaluating security gaps and remediation priorities. Assess and improve network security and segmentation, including access controls and protection of sensitive environments. Oversee vulnerability management activities, including remediation tracking, risk prioritization, and coordination with technical teams. Strengthen SIEM and log management practices to improve security monitoring, visibility, and auditability. Drive remediation around encryption, password security, identity controls, and multifactor authentication (MFA). Support and enhance security awareness and phishing training programs. Partner with stakeholders on business continuity and disaster recovery planning, testing, and remediation. Support enterprise risk management by documenting risks, remediation plans, control owners, and progress to resolution. Develop and maintain audit evidence, security documentation, policies, procedures, and remediation records for internal and external assessments. Communicate remediation status, risks, dependencies, and escalations to technical and business leadership.