Cism jobs in New York, New YorkCreate job alerts

A-V Services Inc., a leading Audio/ Video company with multiple fortune 100 contracts within the financial, pharmaceutical and computing industries, seeks a skilled Administrative / Tech Writer / Threat Modelling Specialist. The ideal candidate will possess the ability to provide comprehensive documentation, threat modelling, and administrative support for engineering teams. Objectives: Ensure effective project management, clear technical documentation, and robust threat modelling to support the identification, mitigation, and resolution of CORE issues within engineering teams. Role and Responsibilities: · Coordinate meetings and manage project documentation. · Develop technical documentation and operational guides. · Identify and document security risks; support mitigation strategies. · Track and resolve CORE (Critical Operations, Risk, and Engineering) issues Job Qualifications · Bachelor’s degree in Engineering, Information Technology, Cybersecurity, Technical Writing, or a related field · Proven experience in technical writing, documentation, and administrative support · Strong understanding of threat modelling and security risk identification · Experience supporting engineering teams and managing project documentation · Excellent organizational and project coordination skills · Proficiency in developing technical documentation and operational guides · Strong analytical and problem-solving abilities · Effective communication and collaboration skills · Attention to detail and accuracy in documentation · Ability to track and resolve critical issues efficiently · Familiarity with risk mitigation strategies and security best practices · Relevant certifications (e.g., CISSP, CISM, or technical writing certifications) are a plus Full Time Position has benefits including employee stock ownership plan (ESOP), competitive and comprehensive health insurance, life insurance, dental program, 401k, 401k company contribution, short-term and long-term disability insurance, FSA, HRA, Commuter Benefit Card, full paid vacations, and paid holidays. Join Our Diverse and Inclusive Team! Here at AV Services Inc. we are committed to fostering an inclusive and diverse workplace where every team member is valued and empowered. We are proud to be an equal opportunity employer, welcoming all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, or any other characteristic that makes you unique. Our Commitment to Diversity and Inclusion: Our employees are our greatest asset, and we believe that the diverse perspectives and experiences they bring are key to our success. We celebrate and encourage differences in age, ethnicity, family or marital status, language, physical and mental abilities, socio-economic status, and more. These unique attributes contribute to our vibrant culture, enhance our reputation, and drive our achievements. Why Work With Us? · Inclusive Culture: We embrace diversity in all its forms and are dedicated to creating an environment where everyone feels respected and valued. · Empowerment: We support our employees' growth and self-expression, recognizing that their individual talents and innovations are vital to our success. · Community: Join a team that values collaboration and the collective strength of diverse backgrounds and ideas. Be part of a company that not only values diversity but actively promotes it as a cornerstone of our identity and success. Apply today and bring your unique perspective to AV Services Inc.

As Risk Advisory Manager-Not-for-Profit and Higher Education Practice, you will get the opportunity to grow and contribute to our clients' business needs by helping them understand their business risks, and assist in addressing risk in both proactive and responsive contexts for the Risk Advisory Practice – all with the resources, environment, and support to help you excel. From day one, you’ll be empowered by the greater Risk team to help clients make the moves that will help them achieve their vision and help you achieve more, confidently. Your day-to-day may include: • Review operational, financial, and technology processes to provide clients with an assessment of business risk, internal control, and the overall effectiveness and efficiency of the processes, • Manage the development and execution of enterprise risk management, operational risk compliance and/or internal control programs for not-for-profit and higher education clients, • Manage the development and execution of internal audit outsourcing and co-sourcing engagements for clients, • Manage the risk identification process and evaluation and testing of business processes and related controls, • Manage the development of leading practices-based recommendations for improvement that are ‘right-sized’ and appropriate for the not-for-profit and higher education industries, as well as the specific needs and circumstances of clients, • Work closely with clients and staff to develop client and project risk assessments, identify opportunities for improvement and leading practices-based recommendations regarding process optimization, revenue enhancement, cost reduction, fraud prevention, internal control, and compliance, • Leverage analytics automation and artificial intelligence solutions to deliver client services efficiently and effectively, • Maintain a good working relationship with clients and work effectively with client management and staff at all levels, • Perform engagement management responsibilities, including performance reviews, task delegation, project scheduling, project financials, quality review and client management, • Actively participate in business development activities, such as developing new business relationships, contributing to / leading proposals, participating on client account teams, developing whitepapers and/or other thought leadership material, and attending conferences, • Understand and manage firm risk on proposals and client engagements, • Manage, develop, train, coach and mentor staff on projects and assess performance for engagement and year-end reviews, • Bachelor’s degree in Accounting, Finance, Risk Management, Information Technology, MIS, or a related field is required, • Minimum 6 years of related work experience in a similar consulting practice or function servicing cross-industry clients at a national level, • Experience working for or with not-for-profit organizations or higher education institutions preferred, • Experience with knowledge of processes, risks, controls and leading practices within not-for-profit and higher education industry-specific functions such as grants management, academic research, fundraising, student services, etc. preferred., • Certification required, CPA, CISA, CISSP, CIA or CISM preferred, • Internal audit experience, enterprise risk management, internal controls and/or compliance experience preferred, • Experience performing financial and operational internal audits, as well as business process, internal control and/or operational reviews within the not-for-profit or higher education industry., • Strong understanding of COSO Internal Control- Integrated Framework (2013), COSO Enterprise Risk Management Framework (2017), the institute of Internal Auditors International Professional Practices Framework (IIA IPPF), and/or current focus areas of external financial statement auditors (completeness and accuracy of key reports, level of precision, etc.), • Ability to execute multiple engagements and completing priorities in a rapidly growing team environment, • Experience with analytics, automation and/or artificial intelligence platforms an understanding of the impact of technology, • Exceptional client service, communication, analytical, organizational and project management skills, • Strong computer skills, including proficiency in Microsoft Office suite applications., • Can travel as needed, • Consistent with the firm's hybrid work model, this position will require in-person attendance at least two days per week, either at the GT office or client office The base salary range for this position in the firm's New York, NY office is between $129,600 to $194,400.

Role Overview: The Cloud Security Engineer is responsible for deploying, managing, and securing cloud solutions across AWS, Azure, and Google Cloud platforms. This role involves close collaboration with IT, Cloud Engineering & Operations, Network Operations and Data Science Center teams, acting as a technical lead and primary contact for cloud security projects, migrations, and integrations. The Cloud Security Engineer is expected to have hands-on experience managing cloud services in a hybrid environment, with a strong focus on implementing and maintaining robust security controls. In addition to technical responsibilities, the Cloud Security Engineer will engage with both internal colleagues at all levels within the firm and external stakeholders, ensuring seamless communication and coordination on cloud security matters. The Cloud Security Engineer will stay informed on emerging cloud security technologies and will translate information security policies into operational processes, continuously enhancing the security posture of the organization. At Cornerstone Research, you will be part of a thriving, 1,000-strong team that spans nine offices, comprises more than 55 nationalities, and leads the industry in its commitment to develop team members across all levels. Inc. Magazine has recognized Cornerstone Research three times as a Best Workplace for its outstanding employee engagement, collaborative culture, and professional growth opportunities. You'll Love It Here If You: * Embrace learning and continuous improvement * Set and strive for a high bar of excellence * Believe that teamwork leads to success: ask us what it means to be #onefirmfirm! * Take pride in always doing your best work, even if it's harder or takes longer * Are passionate about what you do How You'll Help Our Team Succeed: • Designs and engineers secure cloud solutions leveraging Google Cloud, AWS and Azure IaaS, PaaS, and SaaS, with a focus on security best practices., • Researches, designs, and implements new cloud security technologies to enhance Cornerstone's cloud security posture., • Supports applications hosted in cloud environments, ensuring they meet stringent security standards., • Deploys and develops cloud cost management, budgeting, and expensing capabilities, with an emphasis on security aspects to control unauthorized access and expenditures., • Manages and reports on cloud costs, identifying and reporting unusual expenditures with a focus on security implications., • Conducts periodic audits of accounts, permissions, and access rights for cloud services in compliance with security policies., • Builds and maintains strong relationships across IT teams, fostering collaboration on cloud security issues., • Performs periodic gap analyses against current and future security requirements to improve cloud security measures; recommends relevant improvements., • Administers and supports secure connectivity to cloud services, ensuring encrypted and protected data transfers, using AWS Direct Connect and Azure Express Route., • Monitors daily maintenance event logs for cloud-based environments and addresses any noted issues., • Maintains security patches in alignment with industry best practices., • Creates and maintains cloud-related security policies and procedures in partnership with the Director, Information Security., • Creates and maintains cloud security operational documentation and training materials for use by IT staff. What You'll Need to Be Successful: • 8+ years of experience in cyber security roles required, with professional services experience preferred., • Extensive experience supporting and administering AWS, Azure, Google Cloud and O365 cloud environments., • Experience with cloud security implementations, migrations, and integrations within secure frameworks., • Familiarity with programmatic means of cloud security administration, such as cloud APIs and CloudFormation Templates on AWS, with a focus on secure configuration., • UNIX/Linux experience with a strong exposure to server administration., • Bachelor's degree in a relevant field or equivalent combination of education, skills and experience., • Cloud Professional Certification required (e.g., AWS Certified Security - Specialty and/or Microsoft Certified: Azure Security Engineer Associate or similar)., • Additional security related IT certifications (e.g., CISSP, CISM, CompTIA Security+) are a plus. Cornerstone Research is offering a competitive market base salary for this position. The base salary range represents the low and high end of the salary range for this position in all eligible locations. This range may differ based on your geographic location and cost of living considerations. At Cornerstone Research, we believe compensation is more than just a base salary. We offer a competitive total compensation package that includes an annual performance bonus and comprehensive benefits such as flexible options for healthcare, paid time off, and retirement savings. Relocation assistance is not offered for this position. Boston: $141,400 - $171,500 Chicago: $134,00 - $162,500 Los Angeles: $140,400 - $170,300 New York: $143,800 - $174,400 San Francisco: $154,200 - $187,000 Washington, D.C.: $138,800 - $168,400 We're looking for passionate individuals who share our firm's core values and can bring varied perspectives and experiences to our team. Who We Are: Cornerstone Research provides economic and financial analysis and expert testimony in all phases of commercial litigation and regulatory proceedings. We work with a broad network of testifying experts, including leaders from academia and industry, who are recognized for their depth of knowledge, accomplishments, and research. Our staff consultants contribute expertise in economics, finance, accounting, and marketing, as well as business acumen, familiarity with the litigation process, and a commitment to produce outstanding results. We're looking for passionate individuals who share our firm's core values and can bring varied perspectives and experiences to our team. The firm's uniquely collegial, supportive atmosphere makes Cornerstone Research a great place to work. We invest in our people in a host of ways, from providing meaningful learning and development opportunities to organizing memorable social events. To many, our culture and our people are the most exciting, enriching aspects of a Cornerstone Research career. Equal Employment Opportunity: Cornerstone Research provides Equal Employment Opportunities to all employees and applicants for employment without regard to legally protected categories, such as age, sex, gender, gender identity, race, color, creed/religious belief, medical condition, predisposing genetic characteristics or genetic information or testing, disability, marital status, pregnancy status, military status, veteran status, arrest or conviction record (except where permitted by law), sexual orientation, ethnic background, citizen status, ancestry, national origin, or any other consideration protected by federal, state or local law.

Presidio, Where Teamwork and Innovation Shape the Future AtPresidio, we're at the forefront of a global technology revolution, transforming industries throughcutting-edge digital solutions and next-generation AI. We empower businesses-and their customers-to achieve more through innovation, automation, and intelligent insights. The Role Presidio has an exciting opportunity for a Security Practice Lead to join our Cybersecurity National Practice. This individual's primary responsibility is to act as subject matter expert for Presidio's Cybersecurity Solutions, driving overall Cybersecurity service (consulting and vSOC) and product (market leading OEM's/ISV's) revenue, and leading Cybersecurity field enablement in region by working closely with the broader Presidio Sales and Engineering organization. Travel Requirements: 20-25% travel Responsibilities Include: • Proactively engage with clients as a trusted advisor to understand security challenges and requirements and identify how they can be addressed by Presidio and partner solutions., • Provide pre-sales support in collaboration with sales teams and ensure product and service selection meets customers' business and technology needs., • Present and articulate Presidio security value proposition to clients (including C-suite, with an emphasis on the CISO) on both a technical and business level., • Effectively communicate the capabilities of Presidio security services., • Proactively monitor and assess industry/technology advancements and alliances, looking for ways to leverage existing capabilities and emerging technologies., • Define requirements, solutions and value propositions to hand off to Solutions Architects., • Work with Account Managers and Sales Directors to proactively establish presence in key client accounts., • Develop security solution profiles for top accounts and identify key influencers and decision-makers., • Own and develop relationships with key vendor contacts to stay current on vendor updates and to facilitate account mapping, deal registration, discounting and escalations., • Conduct security trainings to build outside sales team's security and lead qualification capabilities., • Work with Presidio Cybersecurity team to identify opportunities for consulting and hardware/software integration services., • Monitor competition by gathering current marketplace information on pricing, products, services, and delivery schedule., • Professional security-related qualifications such as CISSP, CISM, CRISC, CISA, GIAC or equivalent are highly desirable., • Working knowledge and familiarity with GRC and Offensive Security consulting services (e.g., penetration testing, PCI audit, security assessment) is highly desirable (pre-sales perspective)., • Working knowledge and familiarity with Virtualization and Cloud technology is desirable., • Broad experience and understanding of industry standards, framework and best practices such as ISO27001, PCI DSS, NIST, etc., • Broad experience and understanding of security trends, threat landscape and frameworks like the cyber kill-chain., • Ability to listen and communicate effectively with vendors, prospects, clients, account managers and management., • Experience in vulnerability analysis procedures and deliverables., • Bachelor's degree or relevant work or military experience, • 5-10+ years of experience in IT Security and / or Managed Security Services., • Experience in providing guidance in strategic, program and project initiatives in cyber security., • Bachelor's degree in technology or sales related field Ready to innovate? Let's redefine what's next-together. About Presidio Presidio is committed to hiring the most qualified candidates to join our amazing culture. We aim to attract and hire top talent from all backgrounds, including underrepresented and marginalized communities. We encourage women, people of color, people with disabilities, and veterans to apply for open roles at Presidio. Diversity of skills and thought is a key component to our business success. At Presidio, speed and quality meet technology and innovation. Presidio is a trusted ally for organizations across industries with a decades-long history of building traditional IT foundations and deep expertise in AI and automation, security, networking, digital transformation, and cloud computing. Presidio fills gaps, removes hurdles, optimizes costs, and reduces risk. Presidio's expert technical team develops custom applications, provides managed services, enables actionable data insights and builds forward-thinking solutions that drive strategic outcomes for clients globally. For more information, visit ___ Applications will be accepted on a rolling basis. Presidio is an Equal Opportunity / Affirmative Action Employer / VEVRAA Federal Contractor. All qualified candidates will receive consideration for this position regardless of race, color, creed, religion, national origin, age, sex, citizenship, ethnicity, veteran status, marital status, disability, sexual orientation, gender identification or any other characteristic protected by applicable federal, state and local statutes, regulations and ordinances. To read more about discrimination protections under Federal Law, please visit: ___ If you have any difficulty using our online system and need an accommodation in the job application process due to a disability, please send an email to ___ for assistance. Presidio is a VEVRAA Federal Contractor requesting priority referrals of protected veterans for its openings. State Employment Services, please provide priority referrals to ___. Notice to Massachusetts Candidates: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Recruitment Agencies, Please Note: Presidio does not accept unsolicited agency resumes/CVs. Do not forward resumes/CVs to our careers email address, Presidio employees or any other means. Presidio is not responsible for any fees related to unsolicited resumes/CVs. #LI-LM1 Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the ___ notice from the Department of Labor.

Posting Type Hybrid/Remote Job Overview At Relativity we make software to help users organize data, discover the truth, and act on it. Our e-discovery platform is used by more than 13,000 organizations around the world to manage large volumes of data and quickly identify key issues during litigation, internal investigations, and compliance projects. The Senior Manager of Enterprise Security is responsible for leading the strategy, execution, and continuous improvement of the organization's enterprise-wide security programs. This role oversees teams accountable for protecting corporate systems, data, and infrastructure from emerging threats, while enabling the business to operate securely and efficiently. The Senior Manager partners closely with Technology, Legal, Compliance, and business leaders to reduce risk, operationalize security controls, and mature organizational security posture. Job Description and Requirements Role Responsibilities Strategic Leadership * Develop and execute the enterprise security strategy aligned with organizationalobjectives. * Identifyrisks, emerging threats, and industry trends to inform longrange security planning. * Establish metrics, KPIs, and dashboards to measure and report on security posture and program maturity. * Champion a securitybydesign mindset across the enterprise. Team & Program Management * Lead, mentor, and grow a multidisciplinary security teamwhile partnering withother securityareas such as security operations, incident response, threat intelligence, identity security, vulnerability management, cloud security, and GRC. * Drive operational excellence through structured processes, documentation, automation, and continuous improvement. * Oversee securityprogramroadmaps, annual planning, staffing needs, and budget management. Security Operations & Risk Reduction * Createenterprise detection and response capabilitiesthatare fully operational by overseeing proper onboarding and configuration of security agents and tooling,validatingcoverage across all relevant environments, and ensuring telemetry, alerts, and data flows are reliable, complete, and actionable. * Executeenterprise vulnerability management programs, ensuringtimelyremediation of weaknesses across infrastructure, cloud, and enduser environments. * Oversee identity and access governance programs, including privileged access, identity lifecycle, and authentication standards. * Manage enterprise security tooling and technologies, ensuring the stack is integrated,optimized, and delivering measurable value. Governance, Compliance & Policy * Own and evolve security policies, standards, and guidelines to meet internal and external requirements. * Partner with Compliance and Legal to support audits, certifications, investigations, and regulatory obligations (e.g., SOC2, ISO27001, HIPAA, GDPR). * Drive alignment between risk management processes and business operations. CrossFunctional Collaboration * Serve as a trusted advisor to executives and business leaders on security risks and tradeoffs. * Embed security into technology roadmaps, product lifecycles, enterprise architecture, and vendor management. * Promote security awareness and training programs to strengthen organizational security culture. Minimum Qualifications * Minimum of5years ofprogressiveexperience in security, preferably in a high-security environment, with at least 5 yearsina leadershiprole. * Demonstrated ability to communicate security risks and strategies toexecutivesand nontechnical audiences. * Strong understanding of security frameworks (NIST CSF, ISO 27001, CIS Controls, Zero Trust). * Proven experience inmanaging multiple securityinitiativessimultaneously. * Hybrid-working role (2+ days in office)orRemotebased on company policy. Preferred Qualifications * Bachelor's degree in security management, business administration, Computer Science, Information Systems, or relatedfield. * Experience working in a SaaS, cloud-native, or regulatedenvironmentoperatingona global scale. * Experience in the legal space and with a high understanding of e-discovery and litigation. * Certificationsa plus,such as CISSP, CISM, GIAC, CCSP, or similar. * Generate excitement and curiosity when working withhighly complexsystems. * Team player with proven ability to deliver features from inception to delivery. * Excellent written and verbal communication skills. * Detail-oriented, enthusiastic self-starter with ability to work both independently and in a team environment. * Solid understanding of software development lifecycle and agile methodologies. * Knowledge and experience doing discovery & usability testing to gather customer feedback. Relativity is committed to competitive, fair, and equitable compensation practices. This position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives. The expected salary range for this role is between following values: $185,000 and $277,000 The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position. Required Skills: Access Management, Network Security, Project Management, Risk Management, Security Architecture Design, Security Audit, Security Awareness, Security Engineering, Security Operations, Vulnerability Management

Manager of Identity and Access Management ("IAM") Cooley is seeking a Manager of Identity & Access Management to join the Security team. Position summary: Cooley Technology embraces a culture of customer service excellence, and all members of the department are expected to move this agenda forward. To that end the Manager of Identity and Access Management ("IAM") leads the firm's identity and access management program, providing strategic direction and operational oversight across identity platforms and access controls. This role is accountable for Microsoft Entra ID (Azure AD), Active Directory, Privileged Access Management, Identity Governance, Cloud Identity ("AWS"), and Certificate Lifecycle Management. IAM Management ensures secure, compliant, and efficient access to firm systems, applications, and data by managing user identities, authentication, authorization, and lifecycle processes. This role partners closely with Cyber Security, Technology, HR, and business stakeholders to reduce risk, support regulatory and audit requirements, and enable business operations. This hands-on leadership role will provide both strategic direction and day-to-day operational management. Specific duties and responsibilities include, but are not limited to, the following: Position responsibilities: • Lead the firm's Identity and Access (IAM) program, defining strategy, multi-year roadmap, and operating model across workforce, privileged, cloud, and directory identities, • Provider overall ownership of IAM risk, governance, and control effectiveness, ensuring access to systems and data is secure, compliant, and auditable, • Act as the primary IAM authority and escalation point, partnering with Cybersecurity, Technology, HR, and business stakeholders to enable access while reducing security and operational risk, • Oversee Microsoft Entra ID (Azure AD) and on-prem Active Directory, including identity lifecycle management, authentication and authorization models, directory hygiene, and enterprise account management processes, • Lead the Privileged Access Management ("PAM") program, including privileged account onboarding, credential vaulting and rotation, access approvals, break-glass procedures, and ongoing governance aligned to least privileged principles, • Establish and operate identity governance processes, including joiner/mover/leaver workflows, access requests, periodic access reviews, exception handling, and remediation tracking, • Define and enforce authentication standards including MFA strategy, coverage, exceptions, and conditional access controls, across workforce and privileged identities, • Define and govern cloud identity practices, with a focus on Entra ID and AWS IAM roles, policies, federation patterns, and secure access models for human and workload identities, • Own certificate lifecycle management, including inventory, ownership assignment, issuance standards, renewals, revocation, and automation to prevent outages and reduce cryptographic risk, • Establish IAM operational cadence and metrics, including intake and prioritization, change coordination, incident support, KPI reporting, and continuous process improvement, • Manage IAM vendors, tooling, documentation, and runbooks, ensuring solutions remain effective, scalable, and aligned with firm standards and evolving security needs, • Ensure high availability and resilience of IAM services to support 24/7 global legal operations, • Serve as direct supervisor and mentor to direct reports, • Provide day-to-day supervision of direct reports, ensure compliance with assigned work hours and monitor for compliance with all firm and department policies. Manage staffing coverage, review and process time logs/time off requests, • Support business professional development and continued educational opportunities, • In collaboration with immediate supervisor and central HR, participate in hiring, performance appraisals, counseling, termination and other employee lifecycle events, • All other duties as assigned or required Skills and experience: Required: • After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications, • Ability to work extended and/or weekend hours, as required, • Ability to travel, as required, • 5+ years applicable experience in the field (e.g., in Identity and Access Management (IAM), cybersecurity or related technical disciplines, with progressive responsibility across identity platforms and access controls). Senior candidates must have 7+ years experience., • Experience leading IAM programs, including setting priorities, managing delivery, and partnering across security, technology and business functions, • Demonstrated experience defining and executing IAM strategies and roadmaps, translating risk and regulatory requirements into scalable identity solutions, • Strong working knowledge of authentication and authorization models, including MFA strategy, conditional access controls, exception management, and legacy authentication risk reduction, • Hands-on experience with Entra ID (Azure AD) and on-prem Active Directory, including identity lifecycle management, group/role design, and enterprise account administration, • Experience leading or operating Privileged Access Management (PAM) programs, including privileged account governance, credential protection, and remediation tracking, • Bachelor's degree, • Supervisory experience, • Solid understanding of identity governance concepts such as joiner/mover/leaver processes, access request workflows, access certifications, and remediation tracking, • Experience building or maturing IAM functions and/or technologies, • Familiarity with IAM automation and integrations (HR systems, ITSM systems, CI/CD pipelines, or IaC), • Experience supporting regulatory, audit, or compliance programs (e.g., ISO 27001, NIST-aligned controls), • Experience managing IAM vendors, contracts, and third-party integrations, • Relevant certifications such as CISSP, CISM, CIAM, Azure, AWS, or other IAM-focused certifications, • Experience in a law firm or legal services organization, • Experience supporting urgent, high-risk legal workflows without service disruption Competencies: • Demonstrate leadership, accountability, and ownership of outcomes, • Thinks strategically and prioritizes work aligned to business and security goals, • Exercise sound judgement when balancing security risk, compliance, and business needs, • Build strong partnerships and influence stakeholders across technical and non-technical teams, • Communicate clearly with stakeholders at all levels, including leadership and auditors, • Ability to adapt effectively to change and drives continuous improvement, • Strong interpersonal skills and problem-solving skills, • Ability to communicate complex IAM concepts clearly to non-technical stakeholders, auditors, and senior leadership, • Entrepreneurial by nature, • Excellent attention to detail, • Ability to organize, prioritize and coordinate multiple activities often under tight timelines, • Ability to drive projects to completion and achieve goals, • Strong judgment, • Team-player with collaborative spirit, • Unwavering ability to handle and maintain confidentiality regarding firm information, projects,, • client data, • High level of professionalism at all times, • Demonstrated ability to lead through influence and develop talent, • Proactive, analytical mindset, • Effective presentation skills Cooley offers a competitive compensation and excellent benefits package and is committed to fair and equitable employment practices. EOE. The expected annual pay range for this position with a full-time schedule is $155,000 - $225,000. Senior level candidates may be considered for this position and would be eligible for a higher salary range based on experience. Please note that final offer amount will be dependent on geographic location, applicable experience and skillset of the candidate. We offer a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre-tax commuter benefits, life insurance, AD&D, long-term care coverage, backup care for children and/or adults and other parental support benefits. In addition to elective benefit options, benefited employees receive firm-paid life insurance, AD&D, LTD, short term medical benefits as well as 21 days of Paid Time Off ("PTO") and 10 paid holidays each year. We provide generous parental leave and fertility benefits. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.

Technology Cyber Security Architect Cooley is seeking a Cyber Security Architect to join the technology team. Position summary: Cooley Technology embraces a culture of customer service excellence, and all members of the department are expected to move this agenda forward. To that end, the Cyber Security Architect will work to maintain and monitor the security practices and systems implemented by the firm.The Cyber Security Architect will proactively identify and mitigate cyber threats to protect our organization's assets with a focus on emerging technologies and artificial intelligence (AI) security. Working collaboratively with Technology and Innovation teams, the position will design advanced security architecture and threat detection techniques. Specific duties and responsibilities include, but are not limited to, the following: Position responsibilities: • Design and maintain enterprise security architecture across on-premises, hybrid, and AI-enabled environments, • Define security standards, patterns, and reference architectures aligned with business objectives and regulatory requirements, • Conduct security architecture reviews for new systems, applications, AI/ML platforms, and major technology changes, • Partner with engineering, infrastructure, DevOps, and data teams to embed security, privacy, and governance into system design and delivery, • Design security controls for AI and ML systems, including data pipelines, model training environments, inference platforms, and AI integrations, • Identify and mitigate risks related to AI systems, such as data leakage, model poisoning, prompt injection, and adversarial attacks, • Evaluate and recommend security tools, platforms, and AI-enabled security technologies, • Ensure architectures comply with applicable legal, regulatory, and industry frameworks (e.g., NIST, ISO 27001, SOC 2, GDPR, emerging AI regulations), • Establish guardrails for responsible and secure use of generative AI and large language models, including access controls, monitoring, logging, and auditability, • Support incident response, forensic investigations, and post-incident architecture improvements, • Provide guidance and mentorship to security engineers and other technical stakeholders, • Communicate architectural decisions and security risks clearly to technical and non-technical audiences, including senior leadership, • Required to participate in a 7x24 on-call rotation, • All other duties as assigned or required Skills and experience: Required: • After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications, • Ability to work extended and/or weekend hours, as required, • Ability to travel, as required, • 3+ years direct applicable experience (e.g., cybersecurity, infrastructure, or systems architecture). Senior level candidates considered with 5+ years direct applicable experience., • Strong knowledge of network security, identity and access management (IAM), encryption, and endpoint security, • Ability to translate business requirements into secure technical designs, • Extensive knowledge and experience with the configuration of security controls and secure migration of enterprise applications, • Experience with implementing security tools and architecture such as:, • Access Controls, • Data Loss Prevention (DLP), • Web Application Firewalls (WAF), • Secure SDLC and Software Security, • Firewalls, • Anti-malware and anomaly detection controls, • Data encryption in transit and at rest, • Network security, • Monitoring, • Bachelor's Degree in Information Technology, Computer Information Systems, Computer Science, Information Security, or related discipline, • Familiarity with security frameworks and best practices (NIST CSF, Mitre ATT&CK, Zero Trust, OWASP, emerging AI regulations), • Familiarity with common security controls in the enterprise (Firewall, Proxy, AV, SIEM, etc.), • Experience with incident response procedures, • Working knowledge of securing AI-enabled applications and services, including data access controls, model integration, and API security, • Experience applying existing security frameworks and controls to emerging technologies, including AI and automation platforms, • Extensive knowledge and understanding of security issues, techniques, and implications across multiple computer platforms, • Demonstrated experience leading and developing others by providing technical guidance and leadership to project teams, • Solid knowledge and understanding of security regulations and best practices such as the ISO 27000 family of standards, • Solid knowledge and understanding of systems development life cycle (SDLC), • Demonstrated experience translating business requirements into architectural deliverables and technical specifications, • Demonstrated experience communicating technical information to business clients and less experienced technologists, • CISSP, CISM or equivalent, • Experience with CI/CD pipelines, • Cloud Architecture and/or Cloud Security Certifications (AWS, Azure, GCP), • Cloud Security Alliance (CCSP, CCSK) (ISC)2, • Additional security certifications Competencies: • Excellent analytical, problem-solving, customer service, project management and communication skills, • Goal-oriented, • Excellent oral and written communication skills, including technical and user documentation, • Strong organizational skills, • Ability to interact well with all levels of staff and coordinate with several teams to achieve objectives, • Flexible and patient with process development/execution and adherence to instruct project management practices, • Capable of grasping new concepts quickly and without prior experience, • Ability to multi-task and work in fast-paced environment, • Entrepreneurial by nature, • Excellent attention to detail, • Ability to organize, prioritize and coordinate multiple activities often under tight timelines, • Ability to drive projects to completion and achieve goals, • Strong judgment, • Team-player with collaborative spirit, • Unwavering ability to handle and maintain confidentiality regarding firm information, projects,, • client data, • High level of professionalism at all times, • Proactive, analytical mindset, • Effective presentation skills Cooley offers a competitive compensation and excellent benefits package and is committed to fair and equitable employment practices. EOE. The expected annual pay range for this position with a full-time schedule is $120,000 - $175,000. Please note that final offer amount will be dependent on geographic location, applicable experience and skillset of the candidate. Senior level candidates may be considered for this position and would be eligible for a higher salary range based on experience. We offer a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre-tax commuter benefits, life insurance, AD&D, long-term care coverage, backup care for children and/or adults and other parental support benefits. In addition to elective benefit options, benefited employees receive firm-paid life insurance, AD&D, LTD, short term medical benefits as well as 21 days of Paid Time Off ("PTO") and 10 paid holidays each year. We provide generous parental leave and fertility benefits. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.

Keywords: cybersecurity BI business intelligence banking SEC exchange commission NIST ISO GRC servicenow archer CISSP CRISC CISA CISM CEH CCSP KRI KPI. Cybersecurity Business Intelligence and Reporting Specialist Report directly to the Head of the IT Security Strategy, contribute to, and support the

Demonstrated experience deploying IT and and/or Cybersecurity projects and tools in a cybersecurity role in a utility or utility related field. Cybersecurity industry recognized certifications (CISSP and CISM). We are looking for a dedicated and skilled Endpoint Security Program Manager to join our

Job DescriptionPosition Summary The AI/Cloud Security Engineer is responsible for testing, installing, configuring, and maintaining cloud security solutions/tools. Additionally, AI/Cloud Security Engineer communicates findings, incidents, and concerns to security team members and leadership in a timely manner. The AI/Cloud Security Engineer should possess a strong background in AI usage to secure MedReview’s Cloud and AI Infrastructure. This role is onsite Monday - Thursday and remote on Fridays. Job Responsibilities: • Standardizing Azure Security best practices, processes, and procedures., • Experience using AI/ML-driven security tools for anomaly detection, behavioral analysis, bias testing, and threat intelligence correlation., • Ability to design, deploy, and tune AI-based security models to identify malicious traffic, lateral movement, and zero-day threats., • Proficiency in integrating AI-powered SIEM, SOAR, NDR, and XDR platforms to automate incident detection and response., • Knowledge of adversarial AI risks, including model poisoning, evasion attacks, and data integrity threats, and how to mitigate them., • Experience using AI to reduce false positives, prioritize alerts, and improve mean time to detect (MTTD) and respond (MTTR)., • Extensive Knowledge of utilizing and implementing Microsoft Purview and all its features. DLP, Auditing, etc., • Microsoft Entra Internet Access, Microsoft Entra Private Access, and Global Secure Access, • M365 Compliance and Security Centers, • Collaborating with team members to develop and document security standards and policies that align with industry’s best practices., • Finding gaps with the current security posture and assisting with finding new security products, installation, configuration, and policies & procedures., • Monitoring cloud infrastructure for security breaches. Security incident response and forensic investigation., • Investigations into how incidents and/or breaches occur and Root Cause Analyses (RCA) as a member of the incident response team., • Participation in security tabletop exercises.Required Experience:, • Very strong hands on 5-10 years' experience in Cloud Information Security and AI Security Engineering., • Must demonstrate hands-on experience levering AI and machine learning technologies to enhance overall security., • Strong Identity and Access Management (IAM), Role-Based access Control (RBAC) experience, • Strong Purview Environment Experience, • Experience monitoring Cloud Infrastructure and systems for security breaches or intrusions and working with SOC team to remediate., • Experience in some specific vertical industry (Healthcare) preferred., • Documentation of security tools, deployment configuration, incident reports, etc., • CISSP, CISM, CISA, CCSP, ITIL, IaaS, PaaS, SaaS, Azure Security Engineer Associate, or other related certification preferred., • Ability to communicate technical information in a clear manner, both written and verbally, to end users, • Experience with HIPAA, HITRUST, ISO 42001 ISO 27001, ISO 27002, URAC regulations and awareness and/or experience with CMS, NIST and other healthcare related regulations preferred., • Availability to work nights and weekends during (un)planned outages and other special circumstances, with 24/7 accountability., • Availability to enter on call rotation. FZS0onPR06

Job DescriptionCompany Description Sia is a next-generation, global management consulting group. Founded in 1999, we were born digital. Today our strategy and management capabilities are augmented by data science, enhanced by creativity and driven by responsibility. We’re optimists for change and we help clients initiate, navigate and benefit from transformation. We believe optimism is a force multiplier, helping clients to mitigate downside and maximize opportunity. With expertise across a broad range of sectors and services, our 3,000 consultants serve clients worldwide from 48 locations in 19 countries. Our expertise delivers results. Our optimism transforms outcomes. Sia’s Cybersecurity team is the powerhouse of our firm’s innovation. With over 350 experts worldwide, we tackle projects from proof-of-concept to large-scale deployment, always pushing the boundaries of AI capabilities. By joining Sia’s Cybersecurity team, you’ll step into a vibrant, collaborative environment that nurtures professional growth and empowers you to shape the future of consulting. Job Description You will join Sia Partners’ Cybersecurity, Data Protection and Resilience Global Business Line. In accordance with your skills and expertise, you will work - in Consulting, Implementation and Audit - on one or more of our following offers: Strategy, Risk, Compliance, Operations, Data Protection, Offensive Security, Resilience and Training. Key Responsibilities • Manage end-to-end projects or be responsible for sub-projects of a complex and/or international project, on which you will ensure relevant, proactive and regular reporting to the Manager and Client to ensure that our commitments are met., • Take part in business development through the design and development of commercial proposals, as well as by identifying new opportunities and clients., • Manage the client relationship on your missions and build a solid relationship with your contacts on the client side, at middle management level, who recognize you as an expert for your assigned tasks., • Innovation within our Sia CyberLab, where you will work on the development of new offers and SaaS solutions around advanced technologies and capitalizing on our unique know-how in AI. You will also carry out benchmarks and PoC of Cyber solutions on the market, while participating in the active monitoring of Cyber news., • The firm's eminence, around our Cybersecurity expertise, by actively contributing to the publication plan (articles, white papers, studies, webinars, etc.), and represent the firm at various professional clubs, trade shows and events. Qualifications Graduated with a Cybersecurity degree or a related field from an accredited college/university, you have at least 3 years of experience with a consulting firm or a Cybersecurity solutions/services provider/integrator. • You master some Cybersecurity standards, norms and/or reference systems of the market, notably ISO 270xx, SANS, NIST, etc., • You have actively participated in successful projects/missions where you have developed a solid knowledge of at least two of our 8 offerings listed above;, • You have a general knowledge of IP networks, operating systems (Unix/Linux, Windows and/or MacOs), Cloud (AWS, Azure and/or GCP), applications (Web Server, DB, Middleware, etc.) as well as cryptography; knowledge in Blockchain would be a real plus;, • You are familiar with the major market solutions and technologies of: Endpoint Security, VPN, VSX, Proxy/Reverse Proxy, EDR, IAM, MDM, DLP, CASB, Office 365 Security, etc.; Attributes for Success • You actively participated in successful projects where you have developed expertise around the missions listed in the job description, • You have an excellent culture in Cybersecurity and dispose of a strong appetite for solving complex technical problems, • You are a supportive team player who actively develops relationships and is eager to share knowledge with colleagues and our clients, • You are intellectually curious and have the entrepreneurial spirit to invest in the development of innovative offers and solutions, • You wish to join a stimulating and fulfilling professional environment, where you will share the values of expertise, innovation, customer satisfaction and a results-oriented culture, • You wish to evolve quickly and take responsibilities on high stakes subjects within a young, dynamic and supportive team, • You have a strong drive and commitment to deliver high quality work while ensuring that client expectations and deadlines are met. Additional Information Compensation & Benefits We believe in supporting our team professionally and personally. Here’s a snapshot of the comprehensive benefits you’ll enjoy as part of Sia. Competitive Compensation * Annual base salary between $130,600 to $135,700 (commensurate with experience and qualifications) * Annual performance based discretionary bonus Robust Health Coverage * 3 Medical plans * Dental and Vision * Life, AD&D and other voluntary insurance Tax-Advantaged Accounts * 401K retirement plan * 4% matching and 100% vested upon enrollment * Health Savings Account (HSA) * Flexible Spending Account (FSA) * Health, Dependent Care, Commuter Family Friendly Benefits * 100% paid parental leave for all new parents with eligible tenure * Building Healthy Families program if enrolled through Medical plan Time Off to Recharge * Generous Paid Time Off (PTO) policy * 9 company holidays plus 1 floating holiday Extras that Make Life Easier * College savings and student loan repayment assistance * Monthly cell phone stipend * Access to wellness programs at no cost if enrolled through Medical plan, including: * Gym membership reimbursement * LiveHealth Online virtual care * Personalized support from a Well-being Coach * Employee Assistance Program at no cost * Free confidential counseling and emotional support services * On-demand access to Emotional Well-being resources (ranging from relaxation techniques to stress management) Diversity, Equity, Inclusion & Belonging At Sia, we believe in fostering a diverse, equitable and inclusive culture where our employees and partners are valued and thrive in a sense of belonging. We are committed to recruiting and developing a diverse network of employees and investing in their growth by providing unique opportunities for professional and cultural immersion. Our commitment toward inclusion motivates dynamic collaboration with our clients, building trust by creating an inclusive environment of curiosity and learning which affects lasting impact. Please visit our website for more information. Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs. Office Workplace Guidelines Sia is committed to providing a flexible workplace environment that supports client, business, and market needs. Consultants located in our primary market office locations—New York City, Charlotte, Seattle, and San Francisco- are expected to live within a reasonable commuting distance and attend the office at least three days or more per week. For Consultants outside of our primary markets, we can offer more flexible in-person requirements in accordance with your location. Work Authorization & Sponsorship At this time, Sia does not intend to employ any applicant who will require, either now or in the future, employment visa sponsorship or sponsorship for work authorization (i.e., H1-B visa, F-1/OPT) or STEM OPT, TN, etc). Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.

Job Description Overview CTG is seeking a Senior Endpoint Security Engineer to secure and optimize the firm’s modern desktop infrastructure. You will implement and manage endpoint protection solutions, collaborate with global security and IT teams, and ensure compliance with regulatory standards. Location: Manhattan, NY (Onsite 3 days/week) Duration: 6–8 months Responsibilities: * Implement, manage, and optimize endpoint security solutions (antivirus, EDR, encryption). * Define and enforce endpoint security policies and standards across the enterprise. * Monitor and respond to security incidents and vulnerabilities on endpoints. * Support compliance initiatives and participate in audits/security assessments. * Provide technical guidance and support for endpoint security tools and platforms. Qualifications: * 5+ years of experience in cybersecurity or endpoint security engineering. * Strong knowledge of endpoint protection platforms (CrowdStrike, Microsoft Defender). * Experience with Windows and macOS endpoint management. * Familiarity with compliance frameworks (ISO 27001, NIST). * Excellent verbal and written communication skills. Preferred: * CISSP, CISM, or CEH certification. * Experience in global enterprise environments. * Scripting/automation experience (PowerShell, Python). Education: * Bachelor’s degree in Computer Science, Information Technology, or a related field required. Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required. CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role. To Apply: To be considered, please apply directly to this requisition using the link provided. For additional information, please contact Tana Stilloe at . Kindly forward this to any other interested parties. Thank you!

Job DescriptionBusiness AnalystEmployment Type: Full-Time, ExperiencedDepartment: Information Technology CGS is looking for business analysts to work with a large federal agency! As a Business Analyst in Business operations and Content Strategy for CGS, you will partner with internal business owners and external partners to understand new business opportunities and define functional requirements. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Support the development of briefings, agendas, and other general documentation support as directed, including training material and demonstration sessions for new and existing technologies to various stakeholders.- Document and analyze business and functional requirements so that they may be accurately translated into process maps and technical system requirements- Develop comprehensive documentation that meets organizational standards, to include but not limited to basic system architectural diagrams/wireframes, concepts of operations, monthly status reports- Create high-level briefings and communications materials for customers, management, and executive stakeholders- Work with the government and team members to identify, recommend, and implement opportunities for service delivery improvement and new technology implementation- Evaluate program materials and develop innovative approaches for improvement- Independently gather information from subject matter experts to develop, organize, and write procedure manuals, technical specifications, and process documentation- Develop and implement a deep understanding of Microsoft and Atlassian products and services (Teams, SharePoint, Visio, Jira, Confluence) to translate complex product information into simple, polished, and engaging content- Research, outline, write, and edit new and existing content, working closely with various team members to understand project requirements- Develop content in various media forms for maximum usability, with a consistent and cohesive voice across all documentation- Perform risk management, including identifying, prioritizing, and mitigating risks, and communicating and escalating risks and issues- Support a continuous improvement process by providing recommendations on improving products, services, and processes.- Manage client interaction and expectations regarding team efforts- Identify and coordinate cross-team dependencies and collaboration- Continually seek opportunities to increase customer satisfaction, develop and deepen long-lasting client relationships Qualifications:- Must be a U.S. Citizen- Bachelor's Degree (Computer Science, or engineering)- Must be able to successfully complete a stringent Background Investigation and obtain required Government Security clearance- 7+ years of experience in business analysis, systems analysis, and/or design of information systems programs and related business processes- Experience working with phase-based and Agile delivery methods- Experience with Jira or other Agile tools- Ability to clearly communicate technical concepts to both technical and non-technical users.- Must be able to work well both in a team environment and independently.- Must possess exceptional attention to detail- Excellent interpersonal and communication skills- Familiarity with government projects and policy/procedures teams- Demonstrates ability to interact comfortably with Senior Leadership and/or Government Executives and staff on a day-to-day basis- Experience in managing client requirements and small teams- Excellent analytical skills and business presentation skills Ideally, you will also have:- Experience supporting DHS HQ or other US Federal Agencies - Experience tracking and reporting project or program delivery progress and budget execution- Experience developing project briefs and reports for non-technical audiences - Knowledge of the federal acquisition lifecycle- Familiarity with Business Intelligence and Data Analytics- Project Management, Agile, and/or Cyber Certifications (PMP / ACP / CSM / SAFe / CISM) Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Cyber Security Engineer WHO WE’RE LOOKING FOR We build our culture one hire at a time. Our tireless pursuit of providing our partners with world-class management solutions starts with talking to you. Our goal is simple. We want to build great teams that can help our partners focus on delivering exceptional eye care: the kind of teams people want to be a part of, and the kind of teams our patients can’t live without. We want to learn more about you and the kind of team culture you can help us create. We’re interested in your relevant skills and what you can do. We’re even more interested in your positive attitude and flexible mindset. THE OPPORTUNITY AT HAND The Senior Security Engineer will work within Spectrum Vision’s Information Technology organization to ensure the ongoing protection of the applications, systems, network, physical assets, and data of the company and that they are operated under continued alignment with Information Risk and Security policies, standards, and compliance requirements. This will be achieved by ensuring the security tools and processes designed to protect the company’s data, systems, and network are working effectively together. This role is a technical engineering and operations position requiring superior technical design and process-building skills with the ability to advocate and influence positive transformation within the broader IT organization. OUR EXPECTATIONS OF YOU • Must be able to identify and spotlight vulnerabilities on on-premises and remote networks (including cloud operating environments), correct problems, and prevent security breaches, • Develop systems and processes for information risk and security leading practices throughout the company, • requirements and select security technology through RFP / RFI processes, • technical security standards aligned to Information Security policy and client requirements, • Key Risk Indicators and Key Performance Indicators for Security Operations services; monitors for effectiveness and develops performance improvements when necessary., • and Maintain Security Incident Response capabilities and plans and Business Continuity plans, • systems for potential vulnerabilities, • of penetration testing, network security, and the techniques used to expose and correct security flaws, • for proper management of patches to defray business impact while keeping security protocols up-to-date, • computer networks and systems for threats and security breaches, • security incident response and prepare reports on security incidents, • maintains, and implements vendor security assessment plans and conducts vendor security reviews to ensure COMPANY security policies, standards, and external compliance requirements are being met, • draft and development of vendor security related policies, standards, guidelines, procedures, and requirements, • with other security organization members on cross-business / cross-functional opportunities WHAT YOU'LL NEED TO SUCCEED • Bachelor’s degree in related field, • Must have a broad understanding of security technologies including but not limited to firewalls, vulnerability and compliance management solutions, logging and security incident and event management (SIEM) , secure access service edge (SASE) endpoint security, and cloud posture management, and cloud security, • think creatively and innovatively about the information risk and security solutions that can keep data safe while still allowing a business to successful, • have experience in working with regulations and compliance requirements including HIPAA, HITRUST, NIST CSF, ISO 2700x, SSAE-16 (SOC 1, SOC2, SOC3), EU Data Privacy and Security, Privacy Shield, and others, • have experience in developing, executing, and maintaining Security audit plans, audit standards, and vendor security reviews, • have experience in identifying cultural and educational requirements for a diverse population and effectively able communicate audit and technical concepts to them, • are an excellent written and verbal communicator, • proficient with Microsoft Office Suite (Word, Excel, Power Point), • highly collaborative with the ability to properly handle confidential information, • work well independently and in a team environment, and work well in a matrix environment, • able to multi-task, prioritize and meet deadlines, • handle stress well and are comfortable in a high volume environment, • Information Systems Auditor (CISA), • Information Systems Security Professional (CISSP), • in Risk and Information Systems Controls (CRISC), • Information Security Manager (CISM) WHO WE ARE We’re a leading management services organization proudly serving ophthalmology practices and ambulatory surgery centers throughout the Mid-Atlantic and New England regions. We work tirelessly to provide our partners with access to world-class management solutions—including human resources, marketing and patient retention services, finance and accounting services, payroll management, and information technology—so our partners can focus on delivering exceptional eye care. Our leadership team is composed of some of the most experienced individuals in the eye care business. Our senior management team has a combined 200 years of eye industry experience collaborating with some of the most recognized practices in the nation. With nearly 1,400 employees, we support over 50 clinic locations, five state-licensed ambulatory surgery centers, and over 110 surgeons, doctors and other medical professionals. Our brands include OCLI Vision, Ophthalmic Consultants of Connecticut, Island Eye Surgicenter, New Vision Cataract Center and others. At Spectrum Vision Partners we know that cultivating diversity and fostering an inclusive work environment is critical to our impact and success. We create an environment where no individual is advantaged or disadvantaged because of their background. We offer equal opportunity employment regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability status, age, marital status, or protected veteran status. With a commitment to maintaining a bias-free environment in which harassment is prohibited, we respect cultural diversity and comply with the laws of the places in which we operate. We expect our business partners, suppliers, clients, and all of our team members to uphold these commitments.

Job Description Canyon seeks a full-time IT Manager to coordinate all technology operations for Canyon. Who we are Canyon is a nonprofit arts venue opening in 2026 on the Lower East Side of NYC, dedicated to the exhibition of time-based media art and performance. Position Overview The IT Manager reports directly to Canyon's VP of Art & Technology and leads all technology operations for the institution. As Canyon's first IT Manager, this individual will establish and manage all core IT infrastructure while working alongside specialized technical teams-including AV engineers in Exhibitions and conservation technicians in Canyon's conservation center-to ensure seamless integration across all technology systems. This includes ensuring that Canyon's infrastructure supports high-performance media art installations, live events, visitor services, retail operations, and back-office systems. The IT Manager will maintain a secure, scalable, and efficient network that underpins all digital and audiovisual systems across the organization. Working across the Exhibitions, Conservation, Facilities, and Operations divisions, the IT Manager will plan, implement, and maintain integrated AV/IT systems that bridge creative and administrative workflows. Initially operating as a hands-on sole IT practitioner, they will manage procurement, vendor relationships, and contracts for technology systems, coordinate with integrators and service providers, and develop best practices for cybersecurity, access control, and data integrity. The ideal candidate combines technical fluency with hands-on leadership and clear communication. They are a pragmatic problem-solver who can anticipate infrastructure needs, translate between creative and technical teams, and ensure that Canyon's systems operate reliably and intelligently as the venue evolves. Key Responsibilities • Oversee the full IT stack: network, servers, storage, workstations, AV/IT convergence systems, security, backup/disaster recovery., • Manage systems supporting the conservation centre (CMACC), exhibitions, performance program, office operations, and guest services., • Develop and enforce IT policies, procedures and best-practices (e.g., access control, data management, media asset handling, cybersecurity)., • Lead hardware and software procurement, vendor sourcing, contract negotiation, and lifecycle planning., • Collaborate with the Art & Technology division, Exhibitions team, Performing Arts team and Facilities to align IT/AV infrastructure with artistic and operational goals., • Provide day-to-day support, troubleshooting and escalation for technical issues; manage and train any IT staff or contractors., • Plan for scalability: our opening phase leads into growth - exhibitions, performances, conservation workflows and visitor services will all increase., • Monitor budgets, create cost-control measures, and report on technology KPIs to leadership., • Stay current with emerging technologies; recommend strategic technology adoption., • Minimum 5 years of professional IT management experience, preferably in a media-rich, arts-oriented or complex venue environment., • Hands-on experience with converged AV/IT systems, network infrastructure, storage solutions, media-asset management or similar., • Hands-on experience with deploying and managing ticketing systems, CRMs, or visitor experience technology., • Proven ability to manage vendors, negotiate contracts, plan hardware/software lifecycle, and control budgets., • Strong aptitude for systems thinking - integrating the needs of exhibitions, performance, conservation and visitor/guest services into IT strategy., • Excellent communication, project management and problem-solving skills., • Prior experience in a museum, gallery or live-arts venue with time-based media., • Familiarity with conservation workflows or media-art asset management (valuable given our conservation centre)., • Knowledge of AV integration (e.g., digital signage, projection systems, live-event infrastructure, sound systems)., • Cybersecurity certifications (CISSP, CISM) or equivalent experience., • Experience with cloud services, hybrid infrastructure, virtualization, remote work support. Salary is commensurate with experience. The expected range is $125,000-160,000. This is a full-time salaried position. Benefits include medical, dental, and vision insurance; life, AD&D, long-term disability, and short-term disability insurance; a Health Savings Account or Flexible Spending Account; a 401(k) retirement account with a matching contribution; and tuition reimbursement. We are an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status, or any other characteristic protected by law. To Apply Please upload a resume, cover letter, and contact information for three references in the 'Resume' section of the job application portal.

Job Description Incisive. Inclusive. Invested. We’re Axinn. Experienced, tenacious, and always trial-ready, we are committed to understanding complex legal challenges that impact the future of our clients' businesses, globally. Focusing on antitrust, intellectual property, and high-stakes litigation, our extensive teams in the U.S. possess deep knowledge and client-side experience across a range of sectors, including technology, healthcare, life sciences, and consumer products. At Axinn, inclusivity is central to who we are. We have a purpose that goes beyond profit, which includes fostering a fair, welcoming workplace and supporting the communities where we live and work. We actively recognize talent and promote opportunities for all team members. By embracing the unique experiences and perspectives of our people, we fuel creativity and deliver results for our clients. The Firm’s Manager of Information Security is responsible for developing, implementing, and maintaining a comprehensive information security program to protect the firm’s data, systems, and client information. This role ensures the confidentiality, integrity, and availability of all information assets across the firm’s technology and operational infrastructure. The position involves close collaboration with IT leadership, legal professionals, and firm management to maintain compliance with client, regulatory, and industry standards. The position will serve as a strategic advisor to leadership, a hands-on technical manager, and a mentor to security staff, ensuring the Firm’s success in a highly evolving threat landscape. Responsibilities and Duties: • Develop and maintain the firm’s information security policies, standards, and procedures., • Develop, implement, and maintain a comprehensive information security program that aligns with the firm’s strategic objectives and client confidentiality obligations, • Establish metrics to monitor program effectiveness and present updates to Firm leadership, • Assess and manage cybersecurity risks; conduct vulnerability assessments and penetration testing, • Lead incident response efforts, including investigation, remediation, and reporting, • Develop playbooks and run regular tabletop exercises to ensure readiness, • Ensure compliance with NIST, ISO, HIPAA, and client confidentiality obligations, • Oversee (develop and maintain) security policies, procedures, training, and awareness programs for attorneys and staff, • Manage security tools (firewalls, endpoint protection, SIEM, IAM, etc.), • Collaborate with IT, Legal, and Compliance teams on security integration, vendor oversight, and cloud management, • Conduct regular risk assessments and vulnerability testing; manage mitigation and remediation efforts while presenting findings and reports to leadership, • Manage and mentor security staff, • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field required (advanced degrees are preferred), • CISSP, CISM, CISA, GIAC, COMPTia Security+, GISO, certifications are a plus, • Minimum 7–10 years of progressive IT and information security experience, with at least 3 years in a leadership role, • Proven expertise with security frameworks and standards such as NIST, ISO 27001, and HIPAA, • Strong understanding of law firm technology environments, including document management systems, practice management tools, cloud-based platforms, and eDiscovery systems, • Demonstrated ability to lead incident response, risk management, and compliance efforts, • Excellent interpersonal and communication skills, both verbal and written, with experience presenting complex security topics to senior leadership and non-technical stakeholders, • Effective time management skills, with the ability to handle a variety of tasks simultaneously and manage multiple projects while prioritizing assignments, • Ability to build rapport with attorneys, professional staff, and vendors, • Self-motivated, with the ability to work independently but within a team environment At Axinn, we offer market competitive wages and generous benefit options to our valued employees. This includes, but is not limited to, the following: • Competitive starting pay and annual discretionary bonus and raise eligibility, • Generous paid time off benefits (vacation, personal days, holidays, and sick leave), • Firm paid short and long-term disability, plus life and accident insurance, • 401(k) Profit Sharing Plan and Cash Balance Retirement Plan with generous employer contributions (please ask for further details re: eligibility requirements), • Comprehensive medical, dental, and vision insurance options, • Flexible spending and health savings accounts (medical plan dependent), • Firm paid comprehensive Employee Assistance Program (EAP), • Student loan refinancing discounts, • Lifestyle reimbursement program This is a full-time, benefits eligible, exempt level position. Final rate of pay and title will be commensurate with the incumbent’s experience, with a targeted hiring range of $160,000 - $175,000 (the upper range reserved for highly qualified applicants). This position is currently available in either our NY, CT, or DC office locations. Axinn is an equal employment opportunity employer and is committed to creating an environment that draws upon the strength of the diversity of its workforce to achieve excellence in the Firm's field and beyond

Job DescriptionAbout the Company e.l.f. Beauty, Inc. stands with every eye, lip, face and paw. Our deep commitment to clean, cruelty free beauty at an incredible value has fueled the success of our flagship brand e.l.f. Cosmetics since 2004 and driven our portfolio expansion. Today, our multi-brand portfolio includes e.l.f. Cosmetics, e.l.f. SKIN, pioneering clean beauty brand Well People, Keys Soulcare, a groundbreaking lifestyle beauty brand created with Alicia Keys, Naturium, high-performance, biocompatible, clinically-effective and accessible skin care, and our newest brand, rhode, a line of curated skincare essentials, formulated for a variety of skin types and needs with high performance ingredients, it’s a daily routine that nourishes your skin barrier over time. In our Fiscal year 25, we had net sales of $1 Billion and our business performance has been nothing short of extraordinary with 28 consecutive quarters of net sales growth. We are the #2 mass cosmetics brand in the US and are the fastest growing mass cosmetics brand among the top 5. Our total compensation philosophy offers every full-time new hire competitive pay and benefits, bonus eligibility (200% of target over the last six fiscal years), equity, flexible time off, year-round half-day Fridays, and a hybrid 3 day in office, 2 day at home work environment. We believe the combination of our unique culture, total compensation, workplace flexibility and care for the team is unmatched across not just beauty but any industry. Visit our Career Page to learn more about our team: Position Summary: We are seeking a highly skilled Sr. Engineer, IT Security to lead enterprise-wide cybersecurity initiatives and strengthen our security posture across on-premises and cloud environments. This role involves designing and implementing advanced security solutions, including Zero Trust, DLP, Cloud Security, Network Segmentation, IAM, and Security Automation. The ideal candidate will collaborate with cross-functional teams to identify risks, develop mitigation strategies, ensure regulatory compliance, and proactively defend against evolving threats while safeguarding our systems, data, and infrastructure.Responsibilities: • Design, build, deploy, and maintain enterprise security technologies and solutions aligned with business objectives, compliance requirements, and the cybersecurity program., • Develop, document, and enforce security policies, standards, and procedures based on frameworks such as NIST, CIS, ISO 27001, and SOX while advancing overall security maturity, governance, and processes., • Lead strategic security initiatives, including Zero Trust architecture, Data Loss Prevention (DLP), Cloud Security, Network Segmentation, IAM, Endpoint Security modernization, and security automation., • Manage and improve email security, DNS security, and other protective controls to defend against phishing, malware, data exfiltration, and domain-based threats., • Lead vulnerability management programs and drive remediation efforts, providing visibility into risks and progress to stakeholders., • Oversee incident response lifecycle—detection, analysis, containment, remediation, post-incident review—and continuously enhance disaster recovery and business continuity plans., • Monitor and analyze security events and network activity (e.g., traffic analysis, host behavior, forensics, kill chain, Windows event analysis), tuning tools, and event correlation for accurate threat detection., • Collaborate with IT, DevOps, and digital teams to embed security into system design, application development, deployment pipelines, and cloud infrastructure., • Evaluate and review vendor and partner security practices to ensure alignment with organizational standards., • Produce regular security dashboards and metrics to report on incidents, threats, and operational effectiveness., • Lead security awareness training, mentor junior engineers, and guide cross-functional teams on secure design principles and best practices., • Stay current on emerging threats, vulnerabilities, and technologies to enhance enterprise resilience.Requirements:, • Bachelor’s degree in Computer Science, Cybersecurity, or related field; Master’s preferred., • 7+ years of experience in information security engineering, architecture, or operations., • Expertise in cloud security (AWS, Azure, GCP), data protection, IAM/SSO/MFA, email and DNS security, and secure network architecture., • Hands-on experience with key security technologies: firewalls, VPN, NAC, EDR/MDR, IPS/IDS, SIEM, DLP, vulnerability management, and email security platforms (Proofpoint, Mimecast, Microsoft 365 Defender)., • Strong understanding of Zero Trust, endpoint protection, DevSecOps, security automation, and scripting (Python, PowerShell, Bash)., • Proven ability to lead incident response, risk assessments, threat detection, and remediation efforts., • Experience implementing DNS protection solutions (Cisco Umbrella, Cloudflare, Infoblox, Valimail)., • Knowledge of security frameworks and compliance standards: NIST CSF, CIS Controls, ISO 27001, SOX., • Demonstrated success in leading security awareness programs, mentoring team members, and advancing security program maturity., • Relevant certifications preferred: CISSP, CISM, CISA, GIAC, Microsoft Security certifications, AWS Security Specialty, Azure Security Engineer Associate., • Strong communication, leadership, and ability to manage multiple security initiatives.Must Have:Strong Technical Security Foundation & Architecture, • Deep knowledge of network, cloud, and endpoint security., • Hands-on experience with firewalls, SIEM tools (e.g., Splunk, Sentinel), EDR/XDR, IAM, and vulnerability management., • Understanding of encryption, authentication, and secure architecture design.Incident Response & Threat Management Skills, • Ability to detect, analyze, and respond to security incidents effectively., • Skilled in log analysis, threat hunting, and forensics., • Familiarity with MITRE ATT&CK, common attack techniques, and SOC operations.Risk Assessment & Communication, • Strong ability to assess vulnerabilities, prioritize risks, and implement mitigations., • Can translate technical findings into business impact and communicate clearly with both technical and non-technical teams.

Job Description Job Title: DevOps Engineer Job Type: Full-Time Location: Remote Job Summary: Join our team as a DevOps Engineer and play a pivotal role in shaping scalable, resilient infrastructure. You will drive the automation and optimization of CI/CD pipelines, leveraging cutting-edge technologies and cloud platforms. If you thrive in a dynamic environment and have a passion for enabling innovation while ensuring operational excellence, we want to hear from you. Key Responsibilities: • Design, implement, and maintain CI/CD pipelines using tools such as Jenkins, GitHub Actions, and Terraform., • Build, deploy, and manage containerized applications with Docker and Kubernetes in cloud-native environments (AWS/GCP)., • Collaborate closely with developers, architects, and stakeholders to improve infrastructure reliability, scalability, and performance., • Automate infrastructure provisioning, configuration, and monitoring to support continuous delivery., • 5+ years of hands-on experience in DevOps or related engineering roles., • Expertise in Docker, Kubernetes, AWS, and related container/cloud technologies., • Strong proficiency with DevOps automation tools (Terraform, GitHub, GitHub Actions) and version control systems., • Familiarity with security practices in CI/CD pipelines, including vulnerability scanning and compliance checks., • Knowledge of API security, container security, and public cloud security (AWS, GCP)., • Experience with security tools such as Prisma Cloud, SIEM, SOAR, Nessus, or CrowdStrike., • Understanding of security standards and compliance frameworks (PCI-DSS, HIPAA, SOX, GDPR, CCPA)., • Professional certifications such as CISM, CISSP, CISA, PCI-ISA, or PCIP.

Job Description Summary: The Security Architect has primary responsibility for leading the Security Engineering and Architecture function within the Bank’s Information Security team. The individual will develop and maintain the security architecture framework and strategy in accordance with the Bank’s policies, standards, and risk appetite. They will collaborate with business units, Risk Management, and Technology teams to ensure security is integrated with business and technology strategies and objectives. Job Responsibilities: Security Design, Architecture, and Strategy • Lead the Bank’s Security Engineering and Architecture function., • Develop and maintain the security architecture framework, standards, policies, and guidelines for the Bank’s IT systems and applications., • Drive the Bank’s security architecture strategy ensuring adherence to principles of defense in depth, economy of mechanism, least privilege, and secure by default., • Collaborate with business units, Risk Management, and Technology teams to align security architecture with the business and technology strategies and objectives., • Maintain an evolving picture of the threat landscape, trends, and emerging technologies., • Perform security reviews of technology platforms and applications., • Identify and evaluate security risks across technology and vendor platforms, networks, applications, and cloud environments by performing risk assessment and threat modeling activities., • Develop and oversee execution of treatment plans to address identified risks in accordance with organizational policies, standards, and risk appetite balancing security, performance, and business needs., • Analyze and recommend security controls and procedures in acquisition, development, and change management lifecycle of information systems, and monitor for compliance., • Lead the assessment of security processes, platforms, and practices to identify areas for improvement., • Ensure technology solutions have security considerations embedded throughout their lifecycle., • Ensure ongoing compliance with regulatory requirements.Project Management, • Lead in the management and execution of large-scale projects according to project management schedules., • Develop comprehensive project plans including milestones, resource allocation, and timelines ensuring alignment with the Bank’s security objectives., • Coordinate with internal and external stakeholders as required to ensure on-time and on-budget delivery of projects., • Support incident response efforts by reviewing security events and escalations, performing investigations, and seeing matters through to resolution., • Support technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies., • Stay abreast of relevant industry related developments, trends, and threats., • Commit to ongoing professional education and development in the Information / Cyber Security field., • Bachelor’s degree in an IT related discipline required;, • At least 5– 8 years of experience in information technology, information security, risk, or similar field;, • 5+ years of experience in an information security role;, • 5+ years of architecture experience;, • Experience in a highly regulated industries is preferred;, • Relevant industry certifications (CCSP, CISM, CAASP+, SSCP, CNDA, CYSA+) and/or advanced degrees may be considered in lieu of experience;, • Deep expertise in secure design and architecture principles;, • Advanced knowledge of multiple security practice areas including security architecture, security engineering, identity and access management, asset management, vulnerability management, threat detection and response, endpoint security, network security, cloud security, web security, email security, data security, application security, threat intelligence;, • In-depth knowledge of regulatory frameworks including, but not limited to, NIST, PCI-DSS, SOX, FFIEC, ISO27001;, • Ability to provide risk-based recommendations balancing security, performance, and business needs;, • Ability to communicate complex security topics to technical and non-technical stakeholders;, • Medical, Dental, Vision and Rx which are contributory., • Bonus programs., • Employee Stock Option Program (ESOP)., • Life Insurance, Long Term Disability and Accidental Death and Dismemberment (LTD&AD&D)., • Paid Time Off (PTO) which includes Personal and Vacation Time., • Paid Sick Time., • Bank Holidays., • This role is eligible for a hybrid schedule: 3 days in the office and 2 days work from home, based on business needs. This arrangement may change without notice. Columbia Bank and its affiliates is an Equal Opportunity Employer, including individuals with disabilities and veterans.

Job Description Senior Solutions Architect – Cybersecurity (Remote, NYC / Tri-State) National Technology Solutions Provider | Strategic Cybersecurity Role | Leadership Growth Path A top-ranked, national technology solutions provider is seeking a Senior Security Solutions Architect to lead pre-sales architecture and client advisory efforts focused on advanced cybersecurity solutions across the NYC / Tri-State region. This is a remote position based anywhere in the region where you can work from home when not out for client meetings, strategy sessions, and industry events. We’re looking for a senior technologist with deep technical expertise, strong client engagement skills, and the ability to drive high-impact security strategy across enterprise accounts. Why You’ll Want This Role • Leadership Track: Clear path into Practice Management or Strategic Architecture leadership, • Strategic Clients: Guide enterprise and commercial organizations through next-gen security transformations, • Comp Package: Competitive base + strong bonus potential, full benefits, 401(k) match, paid certs & generous PTO, • Culture: Entrepreneurial, collaborative team with resources and support to drive results What You’ll Be Doing • Leading solution design and architecture across Zero Trust, Secure Access, Threat Protection, and Hybrid Cloud Security, • Conducting whiteboarding, discovery sessions, and executive briefings to align technical security strategy with client business needs, • Partnering with Account Executives to deliver strategic proposals, BOMs, solution narratives, and RFP responses, • Producing high-quality technical documentation including architectural diagrams, statements of work, and solution overviews, • Acting as a thought leader on cybersecurity frameworks (NIST, ISO, MITRE ATT&CK) and emerging market trends, • Driving enablement efforts with clients and partners around vendor selection, risk management, and compliance alignment, • Supporting solution evangelism at client events, workshops, and security forums What You Bring • 10+ years of experience in cybersecurity architecture, engineering, and strategy, • Strong expertise with security technologies across Cisco, Palo Alto, Fortinet, Crowdstrike, SentinelOne, Sumo Logic, etc., • Advanced certifications (CISSP, CISM, or equivalent) highly preferred, • Deep understanding of EDR, XDR, SIEM, IDS/IPS, firewalls, endpoint protection, and automation/orchestration tools, • Familiarity with incident response, threat modeling, and secure systems design, • Track record of engaging stakeholders and delivering large-scale security projects on time, • Excellent communication skills, with proven ability to deliver presentations, whiteboarding sessions, and technical documentation, • Strong business acumen to align cybersecurity strategy with organizational objectives Benefits & Perks • Competitive base + performance-based bonus, • Full medical, dental, and vision coverage, • 401(k) with company match, • Paid certifications, training, and ongoing career development, • Generous PTO + paid holidays If you’re a strategic-minded security architect with a passion for shaping enterprise cybersecurity strategy across the NYC / Tri-State region, let’s connect. Apply today or send your resume directly to: Interviews are moving quickly for qualified candidates. Additional openings: levelociti.com/job-search #LI-LVL1

Job Description Job Code 839 Department Name IT Infrastructure Reports To Manager, Information Security FLSA Status Exempt Union Code N/A Management No About Us: Building Services 32BJ Benefit Funds (“the Funds”) is the umbrella organization responsible for administering Health, Pension, Retirement Savings, Training, and Legal Services benefits to over 100,000 SEIU 32BJ members. Our mission is to make significant contributions to the lives of our members by providing high quality benefits and services. Through our commitment, we embody five core values: Flexibility, Initiative, Respect, Sustainability, and Teamwork (FIRST). By following our core values, employees are open to different and new ways of doing things, take active steps to improve the organization, create an environment of trust and respect, approach their work with the intent of a positive outcome, and work collaboratively with colleagues. The Funds oversees and manages $9 billion of dollars in assets, which are made up of many, varied and complex funds. The dollars come from a number of sources, including the property owners who pay into the funds on behalf of their employees, and as such, requires those who oversee and manage the money to be highly skilled financial management people. For 2025 and beyond, 32BJ Benefit Funds will continue to drive innovation, equity, and technology insights to further help the lives of our hard-working members and their families. We use cutting edge technology such as: M365, Dynamics 365 CRM, Dynamics 365 F&O, Azure, AWS, SQL, Snowflake, QlikView, and more. Please take a moment to watch our video to learn more about our culture and contributions to our members: youtu.be/hYNdMGLn19A Job Summary: Under the supervision of the Manager, Information Security, the Information Security Analyst is responsible to plan and carry out security measures to protect Funds’ computer networks, systems, and digital and physical technology assets. Performs assessments, develops and implements information security policies, procedure, and guidelines. Works inter-departmentally to identify and correct flaws in the Funds’ security systems, solutions, and applications while recommending specific measures that can improve the Funds’ overall security posture. Essential Duties and Responsibilities: • Provide guidance and expertise in the field of risk management regarding the protection and security of digital assets in the cloud and on premise., • Design and develop Information Security Architectures to prevent unauthorized access to our information and data breaches., • Develop and implement information security policies and procedures; develops security guidelines and safe practices for Funds’-wide computing and networking systems, and maintain the documentation., • Manage, maintain and monitor security technologies such as vulnerability scanning solutions, IDS/IPS, anti-virus technologies, DLP capabilities, SIEM technologies, host forensics and malware analysis, web application firewalls and proxy solutions., • Manage real time threat detention technologies to identify and quarantine threats, Monitor Endpoint Security Alerts and take corrective action., • Minimize security threats by examining governance, technology infrastructure, and facilities to identify security deficiencies, using risk analysis and follow up with corrective action plan., • Monitor internal control systems to ensure appropriate access levels are maintained, protect against unauthorized system access, modification and destruction., • Review security related reports, logs and occurrences; escalate issues and initiate security response procedures., • Create and review vulnerability reports, track compliance with vulnerability management policies, and escalate., • Research and evaluate emerging technologies in support of security technology enhancements, propose technical solutions to management, to address security weaknesses and coordinate with relevant stakeholders to implement., • Reviews, updates, and enforces data security practices within the organization; tests for exposures to ensure adherence to guidelines and procedures, and works with platform experts to implement remedial measures as appropriate., • Tests security controls and manages the associated remediation of any deficiencies as needed., • Assess security information, triaging and responding to security events, identify false positives, and conduct correlation analysis across numerous internal and external data sources while prioritizing information security incidents., • Perform Project Management tasks for security initiatives /projects., • Manage incident-handling processes, which include implementation of containment, protection, and remediation activities., • Coordinates the handling and resolution of security incidents, to include system intrusions and abuse, and acts as a primary point of contact., • Develop responses to internal & external audits, penetration tests and vulnerability assessments., • Support Information Security training and awareness by providing ideas and content, assist HR with employee security awareness education and training., • Manage multiple priorities and deadlines concurrently., • Provide support after hours, on weekends and through on-call rotation., • Performs other duties as assigned Qualifications (Competencies): • To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required., • Minimum 4 years in Information Security, or IT OPS management and systems administration with at least 2 years specific to IT Security;, • Strong knowledge of Information Security design, principles, and processes; Experience in writing and /maintaining information security policies, standards, and guidelines;, • Demonstrated ability to monitor and audit network security systems such as Firewalls, IPS, SIEM, DLP, web proxy, NAC, and Vulnerability scanners;, • Hands on experience with mitigating security controls (i.e., anti-virus, IPS/IDS, DLP, web and network proxies, URL content filtering, multi-factor authentication, SSL VPNs);, • Experience in incident response required; In-depth knowledge of Windows/Unix operating system forensics, event logging systems, authentication methods, remote and local web application security, penetration testing);, • Advanced experience in networking (TCP/IP) protocols, DNS, LDAP, AD, DHCP, HTTP, Web browsers, Firewalls, and other computer/network security and system administration;, • Familiar with regulatory compliance regulations (PCI, SOX, PII, HIPAA, etc.);, • Strong knowledge of common security frameworks (ISO, NIST, etc.);, • Experience in risk assessments and vulnerability management;, • General knowledge of Endpoint protection solutions;, • Knowledge of mainstream operating systems (Microsoft Windows, Linux, IOS) and a wide range of security technologies;, • General knowledge of Database technologies and queries (Microsoft SQL, MySQL, Oracle, etc.);, • Ability to independently identify, research and resolve issues with minimal amount of supervision, and ability to work with peers in a team effort; Soft Skills (Interpersonal Skills): • Detail oriented with excellent organization and analytical skills;, • Ability to plan, take initiatives to accomplish objectives in timely fashion, and work independently;, • Ability to prioritize work and meet deadlines;, • Ability to establish and maintain effective working relationships with project team members, supervisors, and other employees. Education: Bachelor’s degree in Computer Science, or a related discipline. Language Skills: Speak, read, write and understand English Reasoning Ability: High Certificates, Licenses, Registrations: CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), or CISA (Certified Information Systems Auditor) certification are highly preferred. Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. • Under 1/3 of the time: Standing, Walking, Climbing or Balancing, Stooping, Kneeling, Crouching, or Crawling, • Over 2/3 of the time: Talking or Hearing, • 100% of the time: Using Hands Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. • 1/3 to 2/3 of the time: Work near moving or mechanical parts, exposure to radiation, moderate noise.

Job DescriptionNOTE : This job requires traveling to 37 locations within 5 borough of NYC on need basis. Consultant Qualifications Experience: • 1 to 2 years’ experience in IT Technical Support team leadership in an enterprise environment with a focus on cyber security., • 2 to 4 years’ experience in supporting and maintaining a Microsoft Windows computing environment with hands on troubleshooting and maintaining systems., • Experience supporting mobile devices running Android and Apple iOS operating systems. Education and Skills: • Bachelor’s degree in computer science, cybersecurity engineering, information systems or related discipline., • Strong knowledge of IT supportive skills using ticketing systems and project management tools., • Skilled at working independently, with direction from ACS IT management and prioritize multiple tasks for the team and adapt to needed changes., • Understand and follow broad and complex instructions while maintaining confidentiality., • Effectively communicate technical issues to team members and diverse audiences, both in writing and verbally., • Comprehend technical language and to confer, analyze and write in an objective, lucid manner., • Create workflows and technical documentation, • Remain calm under high pressure/difficult situations., • Preferred certifications: Security+, Network+, A+ from CompTIA, cyber security certifications such as CISM, ITIL certifications. Scope of Work This consultant, with direction from Mobile Technology management, will oversee a team of technicians who will:

Job DescriptionSalary: About Uphold Uphold is a financial technology company that believes on-chain services are the future of finance. It provides modern infrastructure for on-chain payments, banking, and investments. Offering Consumer Services, Business Services, and Institutional Trading, Uphold makes pioneering financial services easy and trusted for millions of customers in more than 140 countries. Uphold strips away the complexity and lack of transparency to open up Web3 finance for everyone. To learn more about Uphold, please visit. The Opportunity We're building a new team to own and transform how Uphold approaches identity, authentication, and security across our global multi-asset platform. The Senior Backend Integrations Engineer is a foundational role where you'll shape the future of secure access for millions of users managing crypto, fiat, and precious metals. You'll design and deliver state-of-the-art authentication systems (from passkeys to multi-factor challenges), strengthen compliance controls for regulated environments, and improve the user experience while improving security. This role combines deep technical expertise with leadership responsibilities - you'll architect critical systems, evaluate vendors, and eventually build and lead a team. What you'll be doing primarily • Design, build, and improve identity and authentication infrastructure that balances user experience with regulatory requirements., • Implement modern authentication solutions including passkeys, WebAuthn, and advanced multi-factor authentication mechanisms (2FA, OTP, biometrics)., • Build systems that enable continuous monitoring, compliance reporting, and forensic analysis for fraud prevention and regulatory teams., • Collaborate closely with Product, Fraud Prevention, Compliance, and Regulatory teams to ensure security solutions meet business and legal requirements., • Research, evaluate, and select third-party identity providers, security vendors, and authentication platforms., • Architect and implement integrations with external identity and security solutions., • Design systems that comply with financial regulations, ensuring strong customer authentication (SCA) and auditability., • Develop and maintain technical documentation, security policies, and architecture decision records., • Lead hiring, coaching, and development of team members as the team grows., • Other duties may be assigned as needed. Required Qualifications • Bachelor's degree in Computer Science, Engineering, or equivalent practical experience., • 5+ years of relevant work experience in backend engineering with deep expertise in identity, authentication, and security systems., • Deep experience with at least one of these languages and strong familiarity with the other: JavaScript (node.js) or Golang., • Proficient in authentication protocols and standards (OAuth2, OIDC, SAML, WebAuthn, FIDO2)., • Experience building and scaling identity platforms at fintech companies or security-focused engineering roles at scale., • Understanding of risk-based authentication, fraud prevention patterns, and security controls in financial products., • Knowledge of regulatory frameworks impacting authentication (e.g., PSD2, KYC/AML requirements)., • Proven ability to architect secure, auditable systems that balance user experience with compliance needs., • Experience evaluating and integrating third-party identity and security vendors., • Strong communication and organizational skills., • Strong problem-solving skills., • Ability to work under pressure., • Team-oriented and collaborative., • Interest and readiness to take on people management responsibilities as the team grows. Expectations: • Work is performed in a hybrid office environment in New York, NY., • Regular collaboration in person and remotely with engineering and cross-functional teams is expected., • Standard office environment with computer workstation setup. Travel Requirements: • Occasional travel to business meetings as needed (up to 10% of the time). Preferred Qualifications • Experience with modern authentication methods like passkeys, biometric authentication, or risk-based adaptive authentication., • Background in highly regulated environments (banking, payments, crypto)., • Familiarity with security frameworks and certifications (SOC2, ISO 27001, PCI-DSS)., • Previous experience building or leading identity/security engineering teams., • Certifications such as CISSP, CISM, or equivalent security certifications. What we have to offer you: • Annual bonus program based on individual, team and company performance., • Home office stipend to support the setup of a productive home office., • Generous PTO, healthcare coverage, and employee assistance programs., • Interesting and fun events and celebrations., • Foodie culture and well-stocked office kitchen. Salary: $168,000 - $200,000 DOE + bonus EEOC Employer We're proud to be an Equal Opportunity Employer and we celebrate our employees' differences, including race, color, religion, gender identity, national origin, age, military service eligibility, veteran status, sexual orientation, marital status, disability, and any other protected classes. Difference makes us stronger and better - together.

Job DescriptionNOTE : This job requires traveling to 37 locations within 5 borough of NYC on need basis. Consultant Qualifications Experience: 1 to 2 years experience in IT Technical Support team leadership in an enterprise environment with a focus on cyber security. 2 to 4 years experience in supporting and maintaining a Microsoft Windows computing environment with hands on troubleshooting and maintaining systems. Experience supporting mobile devices running Android and Apple iOS operating systems. Education and Skills: Bachelors degree in computer science, cybersecurity engineering, information systems or related discipline. Strong knowledge of IT supportive skills using ticketing systems and project management tools. Skilled at working independently, with direction from ACS IT management and prioritize multiple tasks for the team and adapt to needed changes. Understand and follow broad and complex instructions while maintaining confidentiality. Effectively communicate technical issues to team members and diverse audiences, both in writing and verbally. Comprehend technical language and to confer, analyze and write in an objective, lucid manner. Create workflows and technical documentation Remain calm under high pressure/difficult situations. Preferred certifications: Security+, Network+, A+ from CompTIA, cyber security certifications such as CISM, ITIL certifications. Scope of Work This consultant, with direction from Mobile Technology management, will oversee a team of technicians who will:

Job Description Job Title: Senior Project Manager – Vulnerability Remediation (Healthcare Domain) Location: Onsite Experience: 10–15+ years Employment Type: Contract Rate: 60-65$/Hr. Role Summary The Senior Project Manager will lead and manage large-scale vulnerability remediation programs across healthcare application portfolios and infrastructure systems. This role will ensure timely identification, prioritization, and remediation of Critical and High vulnerabilities aligned to regulatory and compliance requirements (HIPAA, HITECH, CMS, HITRUST). The candidate must have hands-on experience driving remediation activities for both application development (code, libraries, APIs, and platform vulnerabilities) and infrastructure (patching, server configuration, network, and cloud security issues). Key Responsibilities • Lead end-to-end program execution for vulnerability remediation related to applications, databases, servers, cloud environments, and legacy healthcare platforms., • Prioritize and track remediation of CVITs, VITs, vulnerabilities in code, patch deployments, and configuration fixes across technical teams., • Work with security, DevOps, application development, enterprise architecture, and infrastructure teams to systematically remediate scan findings., • Conduct backlog grooming, sprint planning, release coordination, and delivery tracking for remediation activities., • Analyze vulnerability scan reports and dashboards from tools such as Qualys, Tenable, Rapid7, CrowdStrike, Microsoft Defender, etc., • Develop remediation plans aligned to exposure of PHI/PII, severity, exploitability, and system criticality., • Prepare and present weekly status decks, risk registers, and executive scorecards for senior leadership and audit teams., • Oversee SOW deliverables, team onboarding, cross-shore coordination, and stakeholder alignment., • Ensure remediation governance, compliance documentation, and closure of cyber audit findings., • 10+ years of IT project or program management experience, including 5+ years dedicated to security or vulnerability remediation., • Must have experience managing both application development and infrastructure-related vulnerabilities, including:, • Code vulnerabilities (OWASP, dependency issues, API weaknesses, encryption gaps), • Infrastructure vulnerabilities (OS patching, server hardening, cloud misconfigurations, IAM issues), • Deep understanding of healthcare systems and PHI security risks., • Strong knowledge of healthcare compliance frameworks such as HIPAA, HITECH, HITRUST, NIST CSF, CMS., • Experience working in distributed delivery models with offshore/onshore teams., • Proficient in Agile, Scrum, and hybrid methodologies., • Excellent communication, stakeholder influencing, and senior leadership reporting capabilities., • PMP, CSM, SAFe, • CompTIA Security+, CISSP, CISM, • Payer systems (Medicaid, Medicare, Marketplace, Commercial), • Claims processing, provider data, enrollment, pharmacy, member access systems, • Reduction in Critical/High vulnerability backlog, • SLA compliance for remediation (30/60/90-day closure), • Audit remediation closure rate, • Legacy backlog risk reduction, • Operational readiness and stability for healthcare systems

Job Description▶︎ Job Details * Job Title: Project Manager – Security / Infrastructure [Japanese Bilingual] * Client: Japanese Company * Working Location: New York, NY * Working Style: Hybrid / Onsite * Employment Type: Full-time * Salary: $100,000 – $130,000 (Annual) * Benefit: Standard company benefits * Working Hours: Standard business hours * Language: Japanese & English (Japanese required) ▶︎ Key Responsibilities * Manage security and infrastructure-related projects from planning through delivery * Act as a coordination point between internal teams, external vendors, and clients for security initiatives * Support the development and rollout of security-related services and operational processes * Oversee multiple security projects simultaneously, ensuring consistency, quality, and timely execution * Manage project documentation, schedules, deliverables, and issue tracking related to security operations * Participate in customer-facing activities, including security assessments, solution proposals, and service reviews ▶︎ The Right Candidate Will Possess * Strong communication skills with the ability to work across technical and non-technical stakeholders * Proven ability to manage multiple initiatives in parallel while maintaining attention to detail * A customer-focused mindset with a strong sense of accountability and ownership * Professional-level business communication skills in both Japanese and English ▶︎ Required Qualifications & Skills * 5+ years of experience in IT infrastructure services, with exposure to network and/or security domains * General understanding of security services such as governance, compliance, vulnerability management, and incident response * Experience in project management, service delivery, or operational coordination roles * Ability to work effectively in a bilingual, cross-border environment Preferred Qualifications * Security-related certifications (CISSP, CISM, etc.) * PMP or equivalent project management certification * Familiarity with ISO/IEC 27001 or similar security frameworks * Network or cloud-related technical certifications Powered by JazzHR CwSCjCr0as

Job DescriptionAmalgamated Bank seeks a dedicated Chief Information Security Officer to be responsible for designing and implementing the Bank’s Information Security program while protecting the business from cyber security threats. This is a hybrid role reporting to our NYC headquarters. By joining our team, you’ll be joining a Bank that believes that maintaining a diverse and inclusive workplace where everyone feels valued and respected is essential for us to grow as a company. We are dedicated to building a more equitable world in our everyday practices by embracing the values of our employees and customers. Essential Job Functions: • Develop and maintain an Enterprise Information Security Program, • Design a critical response process for Cyber Security incidents, • Identify, report and control Cyber Security incidents, • Manage and train Information Security staff and develop and deliver Information Security training to the Bank’s employees, • Continuously monitor threats to the Bank’s operating environment, • Approve and administer identity access policies, • Maintain a current understanding of the IT and Cyber Security threat landscape for the industry, • Ensure Bank compliance with relevant Information Security laws and applicable regulations, • Lead, and assess the results of periodic security tests, including internal and external penetration testing and phishing, • Schedule table-top exercises for Crisis Team and senior management and report findings to management, including implementation of recommendations, • Review and approve Information Security policies, procedures and controls, • Ensure that they are kept current and are communicated to staff/consultants, • Ensure staff/vendor compliance with the Bank’s security policies and procedures, • Manage a team of employees, contractors and vendors involved in Information Security, • Brief the Executive Team on status and risks, overall strategy and necessary budget, • Communicate best practices and risks to the Bank, • Perform a risk assessment of the Bank’s vulnerabilities in the Cybersecurity landscape and develop the Bank’s risk appetite for Information Security, • Develop Key Risk Indicators (KRIs) and dashboard metrics reporting to both the Management Team and the Board of Directors, • Establish strong working relationships with the Heads of IT and business lines, • Develop and present quarterly reports to the Board of Directors. Knowledge, Skills and Experience Requirements: • Master’s degree or equivalent experience, • Minimum of ten (10) years of experience, at least five (5) years focused on managing information security in a complex, matrixed environment, • Extensive experience in regulated industries, especially financial services; banking experience is preferred, • Proven ability to create and maintain enterprise-level information security programs, • Motivated individual with strong analytical, problem solving and root cause analysis skills, • Ability to work on multiple, time-critical projects simultaneously, • Knowledge of Data Privacy Laws, • Working knowledge of information security engineering concepts and principles, • Familiarity with DFS 500 and similar regulations, • Experience working with external regulators, including NY DFS and FDIC, • Excellent verbal and written communications, including presentation of complex data in easily, understood ways, • Ability to confidently interact at multiple levels in the organization and lead cross-departmental team projects, • Experience presenting to senior levels, including Board of Directors, • CISSP, CISA or CISM designations preferred Our job titles may span more than one career level. The starting base salary for this role is between $240,000.00 – $260,000.00. The actual base pay is dependent upon many factors, such as: training, transferrable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. Amalgamated Bank is an Equal Opportunity and Affirmative Action Employer, Minorities / Females / Individuals with Disability / Veterans. AmeriCorps, Peace Corps and other national service alumni are encouraged to apply. View our Pay Transparency Statement. Submission of a resume or any information regarding your qualifications does not constitute a promise or offer of employment. At Amalgamated Bank, we consider an applicant to be someone who has interviewed at least once, in person, with the hiring manager. Amalgamated Bank does not sponsor applicants for work visas. Hybrid Work Model Effective February 18, 2025, employees in office-based positions will be working a Hybrid work schedule consisting of three days or more, on-site per week, Monday - Thursday, although the specific days may vary by site or organization, with Friday designated as a remote-working day, unless business critical tasks require an on-site presence. This Hybrid work model does not apply to, and daily in-person attendance is required for, the contact center, branch service roles, and general services where the work to be performed is located at a Company site; positions covered by a collective-bargaining agreement (unless the agreement provides for hybrid work); or any other position for which the Company has determined the job requirements cannot be reasonably met working remotely. Please note, this Hybrid work model guidance does not apply to roles that have been designated as “remote”. Search Firm Representatives- Please Read Carefully Amalgamated Bank does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for the position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash