Generalwebers

We are seeking an experienced Information Assurance Engineer (IE8476) to join our team on a full-time contract basis. The Information Assurance Engineer will be responsible for protecting organizational information systems, assessing security risks, implementing security controls, supporting compliance initiatives, and helping ensure the confidentiality, integrity, and availability of critical systems and data.

Key Responsibilities:

Assess information systems, networks, applications, and infrastructure to identify security vulnerabilities and potential risks.

Develop, implement, and maintain information assurance policies, procedures, standards, and security controls.

Conduct security assessments, risk analyses, vulnerability reviews, and compliance evaluations.

Monitor security controls and system configurations to identify weaknesses, anomalies, and potential security incidents.

Support incident response activities, including investigation, documentation, remediation, and follow-up.

Collaborate with information technology, cybersecurity, compliance, and business teams to address security requirements.

Maintain security documentation, risk registers, assessment reports, system security plans, and compliance records.

Support vulnerability management, security testing, remediation tracking, and continuous security improvements.

Evaluate proposed technologies, applications, and system changes for security and compliance requirements.

Assist with audits and ensure systems remain aligned with applicable security frameworks, policies, and organizational requirements.

Develop and communicate recommendations for reducing information security risks and improving the organization's security posture.

Support access control, authentication, authorization, and data protection initiatives.

Monitor emerging cybersecurity threats, vulnerabilities, and industry best practices.

Provide technical guidance to stakeholders regarding information assurance and security requirements.

Contribute to business continuity, disaster recovery, and system resilience initiatives.

Qualifications:

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Assurance, Information Systems, or a related field.

3+ years of experience in information assurance, cybersecurity, information security, systems security, risk management, or a related technical role.

Strong understanding of cybersecurity principles, risk management, vulnerability assessment, access controls, network security, and data protection.

Experience with security frameworks and standards such as NIST, ISO 27001, CIS Controls, or similar frameworks.

Experience conducting security assessments, risk analyses, vulnerability reviews, and compliance activities.

Familiarity with security monitoring, vulnerability management, incident response, and security documentation processes.

Proficiency with Microsoft Office and security, compliance, ticketing, or governance platforms.

Strong analytical, organizational, communication, and problem-solving skills.

Ability to manage multiple security initiatives and priorities while meeting deadlines.

Strong attention to detail and commitment to protecting confidential and sensitive information.

Ability to work independently and collaborate effectively with technical and non-technical stakeholders.

Experience with security certifications such as Security+, CISSP, CISM, CISA, or similar credentials is preferred.

Compensation & Contract Benefits:

Annual Contract Rate: $87,000 - $113,000 per year, commensurate with experience, qualifications, and scope of responsibility.

Schedule: Full-time, approximately 40 hours per week, Monday through Friday.

Contract Duration: Initial contract assignment with potential for extension or renewal based on business needs and performance.

Flexible Work Options: Remote or hybrid work arrangements may be available depending on organizational requirements.

Professional Development: Access to cybersecurity training, security workshops, professional development programs, and certification support.

Career Growth: Opportunities to expand responsibilities across information assurance, cybersecurity, risk management, compliance, vulnerability management, and security architecture.

Collaborative Environment: Work with cross-functional teams including information technology, cybersecurity, compliance, risk management, legal, and business leadership.

Qualified candidates will be contacted for an interview.

Equal Opportunity Employer: We celebrate diversity and are committed to creating an inclusive environment. All qualified candidates will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetics, disability, age, or veteran status.