IT Security Specialist 26-07140

Location: New York NY

Duration: 12-Month Contract

We are seeking an experienced IT Security Specialist to enhance and maintain the security posture of enterprise IT environments spanning cloud on-premises and hybrid infrastructures. This role will focus on cybersecurity governance risk management vulnerability management security operations compliance initiatives and security awareness while supporting continuous improvement across the organizations security program.

• Support compliance with security standards regulatory requirements and organizational policies.
• Maintain and update security policies standards procedures and related documentation.
• Participate in internal and external security audits and assessments.
• Track remediation activities risk acceptance documentation and corrective action plans.
• Provide compliance reporting and status updates to leadership.
• Ensure new systems and integrations adhere to security accreditation requirements.

• Conduct enterprise security risk assessments.
• Identify evaluate document and prioritize security risks across infrastructure applications cloud environments and endpoints.
• Develop and recommend risk mitigation strategies.
• Maintain risk registers dashboards and remediation tracking.
• Support vendor and third-party risk assessments.
• Prepare executive-level risk summaries and recommendations.

• Perform vulnerability assessments and scans using industry-standard tools.
• Analyze findings and prioritize remediation efforts based on risk exposure.
• Coordinate remediation activities with infrastructure and application teams.
• Validate remediation through re-scanning and verification processes.
• Develop dashboards and reports to track vulnerability trends and remediation performance.
• Support endpoint vulnerability analysis and security posture reviews.

• Monitor systems and networks for suspicious activity and security events.
• Investigate security alerts and incidents.
• Conduct root cause analysis and implement corrective actions.
• Support SIEM operations alert tuning and log management activities.
• Stay informed of emerging cyber threats vulnerabilities and attack trends.

• Support implementation and management of security controls including:
  • Firewalls
  • IDS/IPS
  • Endpoint Detection and Response (EDR)
  • Antivirus Solutions
  • Encryption Technologies
  • Identity and Access Management Controls
• Assist with endpoint hardening and security baseline reviews.
• Support operational security tasks across enterprise infrastructure.

• Mentor junior security personnel and provide technical guidance.
• Promote knowledge sharing and security best practices.
• Collaborate with infrastructure application cloud and business teams.
• Support the growth and maturity of the cybersecurity program.

• Develop and deliver cybersecurity awareness programs.
• Conduct security training for technical and non-technical users.
• Support phishing awareness and security education initiatives.
• Promote a security-first culture throughout the organization.

• Develop and present reports covering:
  • Security Risks
  • Vulnerability Metrics
  • Compliance Status
  • Incident Trends
  • Remediation Progress
• Build dashboards and visualizations for leadership reporting.
• Communicate security findings and recommendations to executive stakeholders.

• Cybersecurity Governance and Compliance
• Risk Assessment and Risk Management
• Vulnerability Management
• Security Operations and Incident Response
• Endpoint Security and Infrastructure Protection
• Security Monitoring and Threat Analysis
• SIEM and Log Management
• Security Policy Development
• Security Awareness Training
• Executive Reporting and Dashboard Development

• Vulnerability Management Platforms (Rapid7 or similar)
• Endpoint Detection and Response (CrowdStrike or similar)
• Firewalls IDS/IPS and Network Security Controls
• Cloud Security and Hybrid Infrastructure Security
• Security Frameworks and Compliance Standards
• Encryption Technologies and Security Protocols
• Risk Assessment Methodologies
• Security Monitoring and Incident Investigation

For more details reach at