Job Description

Key Responsibilities

• Provide subject matter expertise, oversight, and reporting on all security and compliance matters within the scope of the engagement.
• Maintain and update security policies, procedures, standards, and guidelines, ensuring compliance among FM and subcontractor personnel.
• Oversee all FM and 3rd-party-leveraged security services to ensure alignment with security best practices.
• Coordinate investigation, management, and response to all security-related incidents, including:
• GITSir Alerts.
• GCSOC notifications.
• Lead yearly Security Awareness Training for internal staff and agency personnel.
• Support audit services, including validation of RFI items and coordination with relevant teams.
• Conduct periodic reporting to ITSM on current risk posture across Threat, Vulnerability, Compliance, and Incident Management categories.
• Manage and review the following periodic security reports and activities

VMS (Nessus) Reports
Monthly Security Log Review
Monthly Security Reporting
Quarterly Privileged Access Review
Monthly Imperva DAM Reports
Monthly Carbon Black Reports
Antivirus Status Reports
ACISO Scorecard (Patch Management, Asset Management)
Account Review Reports
Asset Inventory (EOL, EOS, EOSL)
ABLR Onboarding Activities
Qualifications

• Minimum 1 year of relevant working experience in IT security or related field.
• Familiarity with security monitoring tools (e.g., Nessus, DAM, Carbon Black, antivirus platforms.
• Experience in incident management, compliance reporting, and security controls oversight.
• Strong understanding of security frameworks and best practices.

Skills Required