Cyber security compliance jobs in Dallas, TexasCreate job alerts

Security Engineering Leader Dallas, TX - Onsite 5 Days / Week $200,000 - $300,000 Salary + Equity Relocation support available About the Role We are seeking an experienced Security Engineering Director to lead a growing team of security engineers and architects. This role plays a critical part in building, scaling, and embedding security practices across a global technology business. You will oversee a team that drives both day-to-day cyber defense operations and long-term security architecture initiatives, ensuring our systems are robust, scalable, and future-ready. What We’re Looking For We want someone who is both able to design and guide security solutions, while empowering the team to deliver. You will thrive here if you are forward-looking, curious about new technologies, and comfortable working in an environment that blends traditional enterprise with modern cloud-native practices. This is a unique opportunity for a hands-on leader who can balance technical depth with strong people management and strategic oversight. Key Responsibilities • Lead, mentor, and grow a team of security engineers and architects, • Oversee core functions including security engineering & solution design, incident response & threat modelling, identity and access management and automation to support scalable operations., • Partner with IT, risk, and compliance functions to embed security across the business, • Provide security architecture reviews for new applications, ensuring proper authentication, network configuration, and identity controls, • Drive the adoption of cloud security best practices and modern DevSecOps approaches, • Prioritize workloads, orchestrate projects, and ensure data-driven decision-making, • Contribute to the long-term roadmap of security strategy, tooling, and organizational design. About You • Strong technical mastery with broad security engineering expertise across multiple domains., • Several years of management experience while being hands-on as a "player - coach", • Cloud security expertise, ideally AWS (multi-cloud awareness is a plus), • Tools & Tech: Splunk, SASE, role-based access control, DevSecOps, DAST/SAST

Company Description Leonardo is a global industrial group, among the main global players in Aerospace, Defense and Security that realizes multi-domain technological capabilities in Aeronautics, Automation, Cyber and Security Solutions, Electronics, Helicopters, and Space. With over 60,000 employees worldwide, the company has a solid industrial presence in Italy, UK, Poland, and US. It also operates in 150 countries through subsidiaries, joint ventures, and investments. A key player in major international strategic programmes, it is a technological and industrial partner of governments, defense administrations, institutions, and companies. Position: Quality Assurance Manager - Airport Baggage Handling, Packet and Parcels Systems Location: HQ - 3625 N Hall St., Suite 1300, Dallas, TX 75219 Classification Full Time About the role Leonardo US Automation, Inc. is seeking a detail-oriented and experienced Quality Assurance Manager with a minimum of 5 years in QA leadership to oversee the company quality processes for Airport Baggage Handling Systems (BHS) and Packet and Parcels Systems (PPS). The QA Manager will be responsible for developing and executing quality assurance procedures that ensure the safe, efficient, and compliant operation of BHS design, installations, commissioning, and maintenance activities. The ideal candidate will have strong knowledge of mechanical and electromechanical systems, regulatory compliance, and airport operations. Essential Functions • Develop, implement, and maintain quality assurance procedures and documentation specific to airport baggage handling systems., • Lead quality audits, inspections, and system testing throughout the project lifecycle: design, installation, commissioning, and operational handover., • Ensure all BHS work meets FAA, TSA, and relevant local regulatory compliance requirements., • In a IPT organization, Work closely with engineering, project management, and operations teams to resolve quality issues and improve system reliability, monitoring all the quality checks have been made, • Create and maintain QA documentation including inspection and test plans (ITPs),, • Manage non-conformance reports (NCRs), root cause analyses, and corrective action reports., • Train and mentor QA/QC staff and contractors on quality procedures and standards., • Interface with clients, regulatory authorities, and third-party inspectors during inspections and audits., • Track key performance indicators (KPIs) for system quality, uptime, and error rates, providing analysis and reporting to senior management. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. Requirements [Knowledge, Skills, And Abilities] • Minimum 5 years of experience in a Quality Assurance role, ideally within baggage handling systems, material handling, automation, or airport infrastructure projects., • Strong understanding of QA methodologies, ISO 9001 standards, and risk management practices., • Knowledge of relevant U.S. airport regulatory requirements (FAA, TSA, OSHA, ANSI, ASME)., • Familiarity with electromechanical systems, PLC-controlled automation, and conveyor technologies., • Proficient in QA tools such as FMEA, Six Sigma, root cause analysis, etc., • Excellent written and verbal communication skills., • Strong leadership, team coordination, and problem-solving skills. Work Experience • Previous experience working on airport projects or BHS installations as a Senior Quality engineer or Quality manager Certifications (Preferred) • Certified Quality Engineer (CQE) or Certified Quality Auditor (CQA)., • OSHA 30-hour Construction Safety Certification., • Six Sigma Certification (Green or Black Belt). Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. This is largely a sedentary role; however, some e-filing is required. Position Type/Expected Hours of Work This is a fulltime position. Hours of work are defined in the Employee Handbook and in the Employment Agreement Security Clearance No Security Clearance required Equal Opportunity Employer Leonardo US Automation, Inc. is an Equal Opportunity Employer. We provide equal employment opportunities to all employees and applicants regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, citizenship, disability, or protected veteran status, in compliance with all applicable federal, state, and local laws. We are commited to a workplace free of harassment or discrimina􀆟on of any kind. Any behavior that interferes with an employee's ability to perform their du􀆟es may result in disciplinary action, up to and including termination. Our Hiring Process Application Review — We evaluate all resumes against role requirements and identify top candidates. HR Screen — Selected candidates complete an introductory interview with our HR team, focused on motivation and fit. Technical Interview — Finalists meet with the business team for an in-depth technical discussion. Feedback — Every candidate receives a clear decision at the end of the process — no ghosting.

Presidio, Where Teamwork and Innovation Shape the Future AtPresidio, we're at the forefront of a global technology revolution, transforming industries throughcutting-edge digital solutions and next-generation AI. We empower businesses-and their customers-to achieve more through innovation, automation, and intelligent insights. The Role As a Cybersecurity Consultant withPresidio, you'll be a trusted advisor, guiding clients to navigate the complex world of cybersecurity. You'll translate their business needs into robust security architectures, recommending and implementing solutions that safeguard their valuable data. Travel Requirements: This is a hybrid role (remote with several days onsite) and can reside in the Texas region. Expected travel will be 25-35% Responsibilities Include: What you'll do: • Dive deep into client needs: You'll go beyond surface-level requirements, truly understanding their business goals, risk tolerance, and existing infrastructure. This involves conducting workshops, analyzing current security posture, and identifying gaps to help drive client outcomes., • Architect and design tailored solutions: You won't just be selling products; you'll be crafting comprehensive security strategies. This includes designing network security (SSE, and advanced security solutions), endpoint protection, data loss prevention, cloud security, and incident response plans tailored to each client's specific needs., • Drive the entire sales cycle: From initial qualification to final proposal, you'll actively participate in the sales process. This includes collaborating with account managers, developing proposals and/or RFP responses., • We seek a Bachelors' degree or the equivalent work experience and/or military experience, • We seek a minimum of 10+ years' experience in Cybersecurity role involving the design, development and implementation of complex cyber security solution, • A passion for problem-solving: You're not just interested in technology; you're driven to find the best solutions to complex security challenges., • Deep technical knowledge: You possess a strong foundation in cybersecurity principles, architectures, and technologies, with hands-on experience in areas like OT, ICS, and IoT security., • Strong communication and presentation skills: You can confidently present technical information to both technical and non-technical audiences, building rapport and trust with clients., • Leading industry certifications like, CISSP (strongly desired), GICSP, CCIE-Security, CISA, CISM, CEH, CHP, SANS, PCI-QSA are highly preferred, • Previous experience working in a pre-sales role, • Previous experience working for a systems integrator, • Familiarity with the Purdue model NERC CIP and NIST SP 800-82 Your future at Presidio JoiningPresidiomeans stepping into aculture of trailblazers-thinkers, builders, and collaborators-who push the boundaries of what's possible. With our expertise inAI-driven analytics, cloud solutions, cybersecurity, and next-gen infrastructure, we enable businesses to stay ahead in an ever-evolving digital world. Here,your impact is real.Whether you're harnessing the power ofGenerative AI, architecting resilientdigital ecosystems, or drivingdata-driven transformation, you'll be part of a team that is shaping the future. Ready to innovate? Let's redefine what's next-together. About Presidio At Presidio, speed and quality meet technology and innovation. Presidio is a trusted ally for organizations across industries with a decades-long history of building traditional IT foundations and deep expertise in AI and automation, security, networking, digital transformation, and cloud computing. Presidio fills gaps, removes hurdles, optimizes costs, and reduces risk. Presidio's expert technical team develops custom applications, provides managed services, enables actionable data insights and builds forward-thinking solutions that drive strategic outcomes for clients globally. For more information, visit . Applications will be accepted on a rolling basis. Presidio is an Equal Opportunity / Affirmative Action Employer / VEVRAA Federal Contractor. All qualified candidates will receive consideration for this position regardless of race, color, creed, religion, national origin, age, sex, citizenship, ethnicity, veteran status, marital status, disability, sexual orientation, gender identification or any other characteristic protected by applicable federal, state, and local statutes, regulations, and ordinances. To read more about discrimination protections under Federal Law, please visit: If you have any difficulty using our online system and need an accommodation in the job application process due to a disability, please send an email to for assistance. Presidio is a VEVRAA Federal Contractor requesting priority referrals of protected veterans for its openings. State Employment Services, please provide priority referrals to . Notice to Massachusetts Candidates: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Recruitment Agencies, Please Note: Presidio does not accept unsolicited agency resumes/CVs. Do not forward resumes/CVs to our careers email address, Presidio employees or any other means. Presidio is not responsible for any fees related to unsolicited resumes/CVs. #LI-PH1 Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the ___ notice from the Department of Labor.

Job DescriptionWho We Are: At Emburse, you’ll not just imagine the future – you’ll build it. As a leader in travel and expense solutions, we are creating a future where technology drives business value and inspires extraordinary results. Our AI-powered platform helps organizations modernize financial operations, increase visibility, and optimize spend across the enterprise. The security and privacy-focused Governance, Risk, and Compliance (GRC) Lead will lead the efforts for strengthening our security and privacy posture and ensuring adherence to critical regulatory and industry standards. This role will be responsible for building and managing a comprehensive security GRC framework that protects our organization from cyber risks, ensures compliance with security regulations, and enables business resilience. The ideal candidate has expertise in security governance, risk management, and compliance, with the ability to partner with both technical and business teams.What will you do • Essential Functions, • Establish and maintain security policies, standards, and controls aligned with industry frameworks (NIST, ISO 27001, PCI, SOC 2)., • Develop a metrics and reporting framework to assess the effectiveness of the security and privacy programs., • Organize information security risk assessment process, including the reporting and oversight of treatment efforts to address negative findings., • Assist with compliance audits and projects (SOC 1, SOC 2, ISO 27001, ISO 27701, PCI-DSS, Tx-RAMP, and other projects)., • Manage privacy program to ensure that it is in compliance with legal and regulatory requirements (GDPR, PIPEDA, CCPA, CPRA), • Execute Privacy Impact Assessments (PIAs), • Support in the development and implementation of a continuous controls monitoring program for security compliance and automation of manual processes., • Monitor regulatory and industry trends to ensure required changes in compliance policies, procedures, and testing are integrated in a timely manner., • Assist with enterprise-wide targeted training for employee compliance with regulatory requirements, • Coordinate security incident response and resiliency activities from a compliance and governance perspective, ensuring lessons learned feed back into governance processes., • Manage Third Party Risk Management oversight for new and existing vendors, • Education:, • Ability to effectively work as part of a cohesive and agile team., • Ability to manage security audits and frameworks (e.g., PCI, ISO, SOC 1, SOC2, NIST), • Ability to manage privacy audits and frameworks (e.g., GDPR, CPRA, CCPA, PIPEDA), • Ability to manage AI audits and frameworks (e.g., ISO 42001), • Ability to remain organized and to elicit cooperation from a wide variety of sources, including team members, other internal departments, and external parties., • Ability to effectively prioritize and execute tasks in a high-pressure environment and react to project adjustments and alterations promptly and efficiently., • Ability to exercise good judgment and discretion in confidential matters., • Demonstrable experience interacting with auditors and strategic partners in cloud-based environments similar to Emburse, relating to assurance frameworks such as SOX, PCI DSS, ISO27001, SOC 2 Trust Principles, Business Continuity and Disaster Recovery and Third-Party Risk Management., • Preferred: CISSP, CIPP/EU, CIPM, Security+, CISA, PMPRequired Skills, • Excellent analytical skills., • Self-starter with the ability to work with minimal supervision., • Experience working on large cross-functional teams, representing GRC on initiatives such as change management, identity and access management, policy management, and data retention., • Strong writing skills and the ability to communicate information about complex issues to stakeholders in a clear and easy to understand way, • Ability to develop creative and adaptive solutions to unique and complex inquiries, • Unwavered by a rapid-paced working environment and meeting deadlines

Job DescriptionDescription: Davenergy Solutions is a rapidly growing, profitable company, headquartered in San Diego, CA. Our employees are the key to maintaining our competitive edge. To attract and retain the best industry talent, Davenergy Solutions shares its success with its employees and is committed to providing a professional work environment where learning, growth, and recognition are highly valued. If you are seeking an opportunity to work in a progressive organization that will offer you diversified challenges and an excellent opportunity for advancement, please review our current employment opportunities. For more information about Davenergy Solutions and open positions, please visit our website at . Davenergy Solutions is currently seeking an onsite, full-time Construction Administrator (CM-CA) at the Dallas Veterans Affairs Medical Center (VAMC) in Dallas, TX. . This required support is needed to meet the Electronic Health Record Modernization (EHRM) infrastructure upgrades across the Dallas VAMC. Requirements: • The CM-CA shall be able to quickly understand and master the requirements of local, state, and federal jurisdictions and the requirements of each as they relate to the project., • The CM-CA must possess communication, language, and software skills with the ability to utilize a variety of software programs to monitor, update, and produce work products by applying knowledge of computer literacy., • The CM-CA shall possess a working knowledge of construction practices and call upon this knowledge to assist in implementing various project plans including Quality Assurance (QA), Safety, Schedule, Cost, and Change & Information Management., • The CM-CA shall be familiar with site operations of a General Contractor and Subcontractors and the process of managing a building construction operation., • The CM-CA must have working experience monitoring construction activities for Quality Assurance (QA)., • The CM-CA shall have experience preparing, analyzing, and identifying incongruities and deficiencies in the Contractor’s work relative to construction documents., • Required Training (to be completed within contract timeframes): (OSHA 30-Hour Safety Training, VA Cyber Security Awareness Training, VA Privacy Awareness Training, VA IT Training for operation of VA systems (e.g., TRIRIGA), as applicable)Relevant Experience, • Responsible for construction administration and oversight in support of EHRM projects at an active medical facility., • Provides administration oversight and evaluation concerning all construction disciplines as they pertain to project work., • Assists with project management, project engineering, planning, scheduling, constructability reviews, code compliance, testing, record keeping, quality control, cost control, and general oversight of EHRM construction projects., • Conducts site inspections, prepares daily logs, and documents work progress, quality issues, and compliance., • Assists with submittal reviews, RFIs, progress meetings, contractor pay application reviews, and issue resolution., • Determines documentation needs based on engineering risk assessments that could impact patient care or facility operations.Education, • The CM-CA may possess a degree from an accredited institution of higher learning and/or evidence of work experience or technical knowledge to compensate for the absence of higher education., • A minimum of three (3) years of construction-related experience may be substituted and will be reviewed for acceptability.Benefits, • 401(k), • Annual Profit-Sharing Contribution to 401(k), • 10 Paid Federal Holidays, • Health Insurance, • Dental Insurance, • Paid Time OffOptional Benefits, • Accident Coverage, • Vision Insurance, • Short-Term Disability, • Long-Term Disability, • Term Life Insurance, • Medical Bridge

Job Description We envision an enterprise network that inherently defends against cyber threats, eliminates lateral attack vectors like ransomware, and operates free of complexity. Our goal is to deliver Campus Network-as-a-Service (NaaS) that makes network operations virtually invisible to our customers by pushing the boundaries of autonomy. Imagine a network that continuously monitors, optimizes, and upgrades itself—all without the need for human intervention. Our audacious journey began in 2018 when we brought together a team of industry veterans and visionaries in networking, cybersecurity, cloud software, and AI to disrupt a $100 billion enterprise networking market, starting with the wired and wireless LAN. Today, our Nile Access Service is redefining connectivity as a service for organizations worldwide, from cutting-edge technology companies to leading healthcare and financial institutions, and beyond. Where do we go from here? Well, that’s where you come in. We are expanding in all areas, bringing in some of the brightest talent to further shape Nile’s future, prepare for growth, and tackle tough tasks to ensure our momentum never slows. Role Description Nile is seeking a highly skilled Global Service Delivery Manager to join our team in a full-time, in Dallas Taxes. In this role, you will be responsible for overseeing the delivery of Nile's cutting-edge networking services across a global customer base. You will ensure exceptional service delivery by managing end-to-end service execution of a complex network implementation, installation and migration. Your mission will be to ensure customer satisfaction, drive continuous improvement, and uphold Nile's commitment to delivering reliable, high-performance network services. Key Responsibilities: • Service Delivery Management: Oversee the global delivery of Nile's network services, ensuring seamless operations and adherence to SLAs., • Customer Satisfaction: Serve as the primary point of contact for customers, addressing their needs, resolving issues, and ensuring a superior customer experience., • Service Management: Implement and manage ITIL-based service management processes tailored to networking and AI-driven architectures., • Performance Optimization: Leverage AI-driven insights to continuously monitor and optimize network performance, proactively addressing potential issues., • Security and Compliance: Ensure all service delivery processes align with zero trust security principles and industry compliance standards., • Client Relationship Management: Build and maintain strong relationships with clients, understanding their unique networking requirements and delivering tailored solutions., • Leadership and Coordination: Lead and coordinate the delivery of Nile service components, orchestrating efforts among various stakeholders, including customer IT teams, deployment partners, and internal teams. Ensure all parties are aligned and working collaboratively to meet project goals and deliver exceptional service outcomes., • Experience: Proven experience in service delivery management within the networking or IT services industry, with a focus on global scale operations., • Networking Knowledge: Strong understanding of enterprise networking, zero trust security, and AI-driven network management., • IT Service Management: Proficient in ITIL framework and best practices, with the ability to tailor processes to a networking-focused environment., • Customer-Focused: Demonstrated success in managing customer satisfaction and service excellence in a high-tech environment., • Leadership Skills: Strong leadership abilities with experience in coordinating and orchestrating complex service delivery projects involving multiple stakeholders. Ability to guide cross-functional teams, including customer IT departments and deployment partners, to ensure seamless and successful delivery., • Communication Skills: Excellent communication and interpersonal skills, with the ability to articulate complex networking concepts to both technical and non-technical stakeholders., • Education: Bachelor's degree in IT, Computer Science, Networking, Business, or a related field., • Join Nile and play a critical role in shaping the future of enterprise networking by ensuring the delivery of secure, reliable, and innovative network services to our global customers.

Job Description Senior Systems Engineer - Project Lead Location: Huntsville, AL | Full-time | Hybrid Relocation Assistance and Signing Bonus Join the future of Systems Engineering Secmation is seeking a Senior Systems Engineering Project Lead to provide technical and execution leadership for the development, integration, and test of complex RF- and embedded-centric systems supporting defense and industrial cybersecurity applications. In this role, you will lead multidisciplinary engineering teams through full lifecycle execution, with particular emphasis on system integration, spectrum coordination, and test planning and execution. You will serve as a key technical interface between engineering teams, program management, and government customers-ensuring systems are delivered on schedule, within budget, and in compliance with performance, regulatory, and operational requirements. What You'll Do • Lead multidisciplinary teams through development, integration, and test of complex RF-, embedded-, and software-intensive defense systems., • Plan and execute system-level test and validation activities, including laboratory, HWIL, and field environments., • Own spectrum coordination and regulatory engagement, securing frequency authorizations with U.S. government agencies., • Drive systems and test planning, ensuring requirements verification, traceability, and customer acceptance., • Manage technical execution across multi-year programs, balancing cost, schedule, performance, and risk., • Brief internal leadership and government customers on technical progress, risks, and results at key program milestones. Required Qualifications • Active DoD TS security clearance required., • Bachelor's degree in Systems Engineering, Electrical Engineering, Computer Engineering, or a related technical discipline., • 8+ years of progressive experience in systems engineering roles supporting complex, software- and hardware-intensive systems, within defense or national security programs., • Demonstrated experience leading multidisciplinary engineering teams through system development, integration, and test activities., • Strong background in RF and embedded systems, including system-level integration and test., • Experience applying Model-Based Systems Engineering (MBSE) tools and methodologies., • Proven experience planning, coordinating, and executing system-level test events, including laboratory, HWIL, and field testing., • Experience developing system and test plans, managing requirements verification and traceability, and producing detailed test reports., • Experience developing and managing project schedules and technical execution plans for multi-year defense programs, balancing cost, schedule, performance, and risk., • Strong written and verbal communication skills, with experience preparing and delivering technical briefings, reports, and customer presentations. Compensation & Benefits • Competitive salary (based on experience and market conditions), • One-time signing bonus, • Company equity, • Relocation assistance, • 9/80 work schedule (every other Friday off), • Paid time off & flexible work schedules, • Comprehensive health, dental, and vision insurance, • Life and disability insurance (short & long-term), • 401(k) retirement benefits plus employer contributions About Secmation Secmation is not a traditional IT company - we specialize in AI-driven software solutions, embedded cybersecurity, and secure RF systems for the defense industry. Our mission is to deliver next-generation secure technologies for electronic warfare, autonomous systems, and critical defense applications. Visit our website to learn more about our work and impact: Why Join Secmation Secmation is a proven, mission-focused engineering company with more than a decade of success delivering real capability to the defense community. We operate with the speed, ownership, and tight-knit culture of a small business-backed by the credibility and track record that comes from 10+ years of successful execution. Here, engineers build systems that matter, move fast, and ship technology that directly impacts national security. We bring together AI-enabled RF/cyber analysis, trusted execution, and modern digital-engineering pipelines so security is built in from day one. Our technology helps defense teams spot cyber/EW risks earlier, respond faster, and move from model to mission with less friction-supported by zero-trust patterns, strong cryptography, and engineering practices built for defense challenges. Joining Secmation means joining a company where your work matters - and where you can see your code, designs, and ideas directly shape real-world outcomes. Small company. Big mission. Real engineering. Equal Opportunity Employer Secmation is proud to be an equal opportunity employer. We are committed to building a diverse and inclusive team. All qualified applicants will be considered for employment without regard to age, race, gender, orientation, identity, religion, or veteran status. U.S. Citizenship is required for this position due to government clearance requirements. The salary range for this position represents a general guideline; however, Secmation considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.

Job Description Position Summary: Spectral AI, Inc. (Spectral) is seeking a Cybersecurity Engineer to join our growing design and development team. The position is based in Dallas, Texas, with hybrid work flexibility in accordance with the Spectral Employee Handbook guidelines. The Cyber Security Engineer will support the design, development, and maintenance of secure medical device software systems, ensuring that cybersecurity controls are resilient and compliant with FDA regulations, international standards (e.g.. ANSI/AAMI SW 96:2003, IEC 62304, IEC 81001, ISO 14971, ISO 27001), and organizational security policies. The engineer will collaborate closely with Software Engineering, Hardware Engineering, Quality Assurance, Regulatory Affairs, Biomedical Engineering, Data Science, Systems Engineering, and IT internal teams to embed cybersecurity into design controls, risk management, regulatory submissions, and post-market surveillance activities. Essential Duties and Responsibilities: Product Cybersecurity • Institute Security-by-Design practices throughout the entire lifecycle of the Spectral device software, AI models, firmware, and hardware., • Develop and maintain cybersecurity standard operating procedures (SOPs) and work instructions that support compliance with regulatory and security requirements in all target markets for Spectral products., • Perform cybersecurity risk assessments for medical device systems using structured methodologies (Threat Modeling, STRIDE, DREAD, Attack Trees, SBOM analysis)., • Execute and document risk evaluation aligned with AAMI TIR57, AAMI TIR97, FDA Premarket Cybersecurity Guidance, and ISO 14971., • Participate actively in Coordinated Vulnerability Disclosure (CVD) processes, working with internal team and vendors to ensure vulnerabilities are responsibly reported, remediated, and communicated in alignment with industry best practices., • Maintain and periodically update cybersecurity documentation and supporting artifacts, including:, • Security risk assessment, • Security risk management reports, • Threat models, • Collaborate with software engineers to implement secure coding practices and structured code review processes., • Ensure correct implementation of security requirements, encryption standards, authentication and authorization controls, and security-relevant logging., • Evaluate SOUP/OTS components for vulnerabilities, maintenance status, and compliance with FDA software bill of material (SBOM) requirements., • Perform vulnerability scanning across firmware, software, cloud services, Linux-based, and Windows-based cart devices., • Triage and validate Common Vulnerabilities and Exposures (CVEs) relevant to device components, run-time environments, and third-party libraries., • Prepare vulnerability mitigation plans and support development teams during remediation., • Prepare documentation, architecture diagrams, and accounts for test execution., • Assist in establishing cybersecurity monitoring processes for fielded devices and cloud environments. Required education and experience: • Bachelor’s degree or above in Computer Science, Cybersecurity, Electrical/Computer Engineering, or a related field., • 3–5 years of proven experience in cybersecurity engineering, ideally within medical devices, healthcare technology, regulated software, or other safety-critical systems., • FDA Premarket Cybersecurity Guidance, • IEC 62304 Software Lifecycle, • AAMI TIR57 / TIR97, • OWASP Top 10, CWE, and secure coding principles, • Familiarity with Transport Layer Security (TLS), certificate management, encryption protocols (e.g. AES, RSA), and authentication/authorization models., • Understanding of cybersecurity vulnerabilities and FDA reporting requirements, • Experience supporting FDA medical device submissions with cybersecurity documentation., • Hands-on experience with medical cart or handheld device security (Windows, Linux, embedded OS)., • Experience with cloud-connected medical systems (AWS IoT, secure APIs, VPN connections)., • Excellent written and verbal communication skills in English., • Detail-oriented, strong analytical and problem-solving skills., • Ability to prepare quality cybersecurity documentation suitable for regulatory review., • Ability to collaborate across functional teams such as engineering, QA/RA, hardware, and clinical teams. Occasional support during off-hours for security events or release deadlines Equal Employment Opportunity: Spectral AI, Inc. is an equal opportunity and affirmative action employer. All applicants will be considered for employment without regard to race, color, ancestry, national origin, sex, gender, sexual orientation, marital status, religion, age, disability, gender identity, results of genetic testing, protected veteran status, or any other characteristic protected by applicable federal, state, or local laws.

Job DescriptionISSOEmployment Type: Full-Time, Experienced Department: Information Technology CGS is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentation to support Dept. of Commerce systems and efforts to achieve their Authorization to Operate (ATO). This position is located at the client site in the Herbert Hoover building in Washington, DC. The scope of this position includes full life-cycle Assessment and Authorization (A&A) management through all 6 Steps of the RMF process in support of the Government ISSM.In this role, you’ll conduct security assessment, and information system security oversight activities in accordance with NIST 800.53 that support systems from the perspective RMF requirements. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Review systems to identify potential security weaknesses and recommend improvements to amend vulnerabilities, implement changes, and document upgrades. - Maintain responsibility for managing cybersecurity risk from an organizational perspective. - Identify organizational risks, prioritize those risks, and maintain a risk registry for escalating and presenting those risks to senior leadership.- Provide security guidance and IS validation using the National Institute of Standards and Technology (NIST) RMF, DoC, and local security policies.- Providing configuration management (CM) recommendations for information system security software, hardware, and firmware and coordinating changes and modifications with the ISSM, Security Control Assessor (SCA), and Authorizing Official (AO).- Maintain vulnerability scanning tool compliance, such as HBSS or ACAS, and patch management, such as IAVM to ensure IT staff pushes patches to all systems in an effort to maintain compliance with all applicable directives, manage system changes, and assess the security impact of those changes.- Support security authorization activities, including transitioning from the legacy Information Assurance Certification and Accreditation Process (DIACAP) to compliance with the DoC RMF.- Provide subject matter expertise for cyber security and trusted system technology. - Apply advanced technical knowledge and analysis of specialized functional areas in task requirements to develop solutions to complex problems.- Research, write, review, disposition feedback, and finalize recommendations regarding cyber security policy, assessment and authorization assessments (A&As), security test and evaluation reports, and security engineering practices and processes. - Conduct research and write risk assessment reports to include risk thresholds, evaluation, and scoring.- Support analysis of the findings and provide expert technical guidance for mitigation strategies, including implementation advice on the cyber security risk findings, and other complex problems. Qualifications:- Bachelor’s Degree.- A minimum of five (5) years experience as an Information Assurance (IA) Analyst, ISSE, ISSO, or similar role in ATO package development, including generating security documentation for requirements, security control assessment, STIG and IAVA compliance, Standard Operating Procedures, test results, etc.- eMASS experience.- Professional security certification such as: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher.- Strong desktop publishing skills using Microsoft Word and Excel.- Experience with industry writing styles such as grammar, sentence form, and structure.- Ability to multi-task in a deadline-oriented environment. Ideally, you will also have:- CISSP, CASP, or a similar certificate is preferred.- Master's Degree in Cybersecurity or related field.- Strong initiative, detail orientation, organizational skills, and aptitude for analytical thinking.- Demonstrated ability to work well independently and as a part of a team.- Excellent work ethic and a high commitment to quality. Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.Health, Dental, and VisionLife Insurance401kFlexible Spending Account (Health, Dependent Care, and Commuter)Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Location: Dallas, TX - in-office presence required whenever needed and up to 3 times a week Job Type: Full-Time Target Salary Range*: $205,000 - 245,000. *This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary Position Overview: This role will be the subject matter expert (SME) for IP/MPLS wide area networks, taking on design, implementation, and high-level problem-solving. This role will participate in large scale project initiatives, such as deploying a 100+ site private LTE solution that will be supported over the existing private IP/MPLS network. Duties will primarily be aligned with ensuring the IP/MPLS infrastructure is optimally and securely configured to ensure the success of these projects while also ensuring existing OT/Enterprise services already supported on the network remain stable and not put at risk. Key Roles and Responsibilities • Evaluate project requirements/scope and work in close collaboration with project teams consisting of project managers, architects, engineers, cyber security in order to develop end-to-end communications solutions., • Create various design and as-built documentation including network architecture diagrams, templates, scripts, operational support materials, bandwidth capacity reports, configuration/security compliance reports, hardware selection, validation criteria, etc., • Work with the existing network architects/engineers to integrate WAN with data centers support teams and vendors to coordinate IP routing and connectivity into the Enterprise networks., • Submit firewall change requests to Security team as necessary for enabling communications to/from the WAN and/or associated management tools/enterprise applications., • Create MOPs and Test Plans and/or review MOPs and Test Plans developed by other teams., • Work directly with the Network Operations team as well Field Network Technicians as a senior technical support role during the implementation of changes which may occasionally be performed outside normal business hours or weekends., • Evaluate risk and make recommendations to remediate a discovered vulnerability with the IP/MPLS network., • As a network SME, you will be expected to provide technical information or assist with data/log collection in the event of a cyber incident which directly or indirectly involves the IP/MPLS network., • Join other engineers and/or technician to perform on-site visits to the offices, data centers, tower sites or substations as necessary to evaluate and plan the deployment of new network infrastructure., • Adhere to the Network Engineering standards/best practices as well as create new standards or adjust as networks evolve. Education: • Strong understanding of MPLS, BGP, ISIS, L3VPNs, traffic engineering and QoS is required., • Experience with Nokia 7750 and 7705 router platforms is highly preferred., • Experience working directly with service providers/ISPs for leased circuits, dark fiber, cellular and radio backhaul solutions., • Experience working with security teams and knowledge with TCP/UDP based protocols and how these are supported across firewalls., • Strong interpersonal and communication skills, both verbal and written, are required., • Proficient at creating and managing vendor support cases (both internal and external) as well as using workflow or issue-tracking tools such as JIRA.

Job Description Forhyre is seeking a talented individual that will be able to provide security architecture support and interface across the program as needed. This support includes, but is not limited to, cybersecurity solutions, providing technical strategy for solutions, guidance, policy, and implementations. The successful candidate for this position is a highly motivated individual, with a strong IT security background who excels integrating, operating, and deploying security technology and solutions and interacts well with both internal teams and clients. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. Responsibilities: • Engineer, implement and monitor security measures for the protection of computer systems, networks and information, • Develop and implement security policies and controls to support the Cyber Security framework, • Manage the existing cyber security training program across global, multilingual business, • Assists in ensuring global Information security program meets all industry regulations, standards, and compliance requirements, • Drive adoption of infrastructure security best practices and work with Information Technology teams to ensure security standards are maintained, • Implement technology to proactively scan Information Technology environment for security breaches and suspicious activity, • Continuous improvement in the areas of Information Security technologies, techniques and processes, • Develops and maintains an effective system for the distribution of regular key performance indicator reports and dashboard, • Ability to interpret penetration test results and describe issues and fixes to non-security expert, • Responsible for leading an accurate & comprehensive status reporting to the executive steering committee, • Create and implement SOP/ process improvement initiatives to achieve outcomes that align or exceed the expectations of strategic roadmap Skills & Experience • 8+ years hands-on experience designing or implementing security solutions, including all related documentation and artifacts, • Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps, • Extensive experience in design and development of enterprise security architectures. Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology., • Strong knowledge and experience in secure enterprise architecture design, especially with regard to IAM, NDR, EDR, SIEM, AI/ML, and other cybersecurity tools and resultant applications, • Experience selecting effective methods, techniques, and evaluation criteria to achieve desired outcomes, • Previous experience developing architectures, strategies, strategic plans, roadmaps, and technical standards for the federal IT enterprise environment., • Vulnerability Assessment testing and/or Penetration Testing (preferred), • Robotic Process Automation/Intelligent Automation (preferred), • Business case development supporting security technology solutions (preferred), • Additional certifications demonstrating cybersecurity/technical mastery (preferred)

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today! Summary: The Senior Director of Cloud Security leads the global strategy, architecture, engineering, and governance of cloud security for an enterprise operating in multi-cloud and hybrid environments. This role is accountable for securing public cloud (IaaS/PaaS), SaaS platforms, containerized workloads, and cloud-native application architectures while enabling business velocity, digital transformation, and regulatory compliance. This role is responsible for building strong partnerships with technology teams, other corporate support functions, and other Information Security organizations to protect the corporate brand, data, and assets and is responsible for the design, implementation, operation, and maintenance of an information security framework, processes, and systems, that protect the business, services, information and systems against unauthorized use, disclosure, modification, damage, and loss. The position partners closely with the CISO, other Information Security Sr. Leaders, and other Technology Leadership teams to establish a vision and strategy required to ensure scalable, measurable, and continuously improving defense capabilities across the applicable security domain in collaboration with other information security domain leaders and partner organizations. Our employee experience is a strategic priority for our company. Our leaders are accountable for leading with purpose, fairness, and equity. They are responsible for building and developing diverse teams, maintaining a safe and inclusive environment, setting clear priorities, and holding self and team accountable for executing with excellence. Primary Responsibilities: * Define and execute the enterprise cloud security strategy aligned to corporate risk appetite and regulatory requirements. * Establish cloud security reference architectures, guardrails, and design patterns. * Lead cloud security governance across AWS, Azure, GCP, and strategic SaaS providers. * Own cloud security policy framework and control standards (aligned to NIST, * Present cloud risk posture and roadmap to executive leadership and key stakeholders. Lead cloud security architecture for: * Landing zones and platform engineering * Identity and access management (including zero trust) * Network security and segmentation * Encryption and key management * Container/Kubernetes security * API security * Cloud-native application protection Additional Responsibilities: * Establish secure-by-design and DevSecOps integration models in collaboration with Application Security Engineering and Secure SDLC engineers. * Drive an automation first infrastructure-as-code and policy-as-code strategy in partnership with Platform Engineering and Application Security Engineering * Oversee and partner w/global support partners CSPM, CWPP, CNAPP, DSPM, SSPM and related platforms. * Drive critical alignment and integration w/engineering and delivery leaders supporting capabilities such as CIEM, CASB, and SSE * Partner with SOC and Cyber Defense Engineering for cloud threat detection and response integration. * Oversee cloud logging, telemetry, and SIEM/SOAR integration. * Partner with Cyber Defense Engineering on the creation, validation, and testing of cloud incident response engineering playbooks. * Partner with Risk Management and other key stakeholders to establish vulnerability management and misconfiguration remediation pipelines. * Track and reduce enterprise cloud risk metrics. * Secure multi-cloud architectures across AWS, Azure, GCP. * Ensure consistent controls across on-prem, private cloud, and SaaS ecosystems. * Support M&A integrations and divestitures with cloud security assessments and rapid control deployment. * Ensure compliance with global regulatory regimes (e.g., HIPAA, GDPR, SOX, FDA/GxP where applicable). * Enable audit readiness and continuous control monitoring. * Partner with Legal and Privacy on data residency and cross-border cloud risks. * Build and lead a global team of cloud security architects and engineers. * Develop succession planning and technical career paths. * Establish KPIs, OKRs, and performance dashboards. * Enterprise financial management and planning experience. * Foster collaboration with platform engineering, SRE, and DevOps teams. * Follows information security trends within and outside of work with executive leadership to strategize and recommend changes and updates to company Educational, Experience & Knowledge Requirements: Education: * Master's Degree in Business Administration, Computer Science, Information Technology or any other related discipline or equivalent related experience. Preferred Certifications: * Certified Cloud Security Professional (CCSP) * Certified Information Systems Security Professional (CISSP) * Certification in Information Security Strategy Management (CISM) * Microsoft Certified: Cybersecurity Architect Expert (SC-100) * Information Technology Infrastructure Library (ITIL) * Offensive Security Certified Professional (OSCP) * Project Management Professional (PMP) Certification Work Experience: * 12+ years of directly-related or relevant experience with 8+ years in a managerial capacity, preferably in information security. Behavioral Skills: * Coaching and Mentoring * Creativity & Innovation * Decision Making * Leadership Skills * People Management * Planning * Risk-taking Technical Skills: * IT Risk Management * IT Controls * Cyber Attack Mitigation * Enterprise IT Management * Network Security * Service Level Maintenance * Information Security Strategy Continuity * Threat Modelling * Information Security Strategy Standards (SOX, ISO 27001/27002, COBIT, ITIL, NIST, PCI) Tools Knowledge: * Microsoft Office Suite * Security Tools - SIEM, EDR, Email Security Gateway, SOAR, Firewall, Anti-virus, Firewalls, VPN IDS/IPS, AV, proxies, etc. * Security Testing Tools - Open Source and COTS security tools * Threat Intelligence Tools * Vulnerability Testing Tools We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit ___ Full time Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law. The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory. Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email ___. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned Affiliated Companies: AmerisourceBergen Services Corporation

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today! Summary: The Senior Director of Cyber Defense Architecture & Engineering leads the strategy, design, engineering, and continuous improvement of enterprise detection, response, and threat mitigation capabilities across the enterprise. This role is accountable for building or integrating resilient, intelligence-driven, automated cyber defense platforms spanning endpoint, network, cloud, identity, data, and SaaS environments. This role is responsible for building strong partnerships with technology teams, other corporate support functions, and other Information Security organizations to protect the corporate brand, data, and assets and is responsible for the design, implementation, operation, and maintenance of an information security framework, processes, and systems, that protect the business, services, information and systems against unauthorized use, disclosure, modification, damage, and loss. The position partners closely with the CISO, Cyber Defense Sr. Leadership, other Information Security Sr. Leaders, and other Technology Leadership teams to establish a vision and strategy required to ensure scalable, measurable, and continuously improving defense capabilities across the applicable security domain in collaboration with other information security domain leaders and partner organizations. Our employee experience is a strategic priority for our company. Our leaders are accountable for leading with purpose, fairness, and equity. They are responsible for building and developing diverse teams, maintaining a safe and inclusive environment, setting clear priorities, and holding self and team accountable for executing with excellence. Primary Responsibilities: * Define and execute the enterprise cyber defense architecture strategy aligned to threat landscape and risk appetite in collaboration with Cyber Defense senior leadership. * Develop layered defense models across endpoint, network, cloud, identity, and SaaS. * Establish and document detection engineering standards and reference architectures. * Present defense posture maturity, risk trends, and roadmap to executive leadership. * Establish the enterprise detection engineering program and lead evaluation of new tools and technologies to support the Cyber Defense ecosystem. * Define logging standards and telemetry requirements across platforms. * Collaborate & partner with key stakeholder to oversee use case lifecycle management (creation, tuning, retirement). * Standardize MITRE ATT&CK mapping across detections. * Reduce false positives while increasing true positive detection rates in collaboration with Cyber Defense teams. Oversee or drive a collaborative approach to architecture and engineering of: * SIEM platforms * SOAR playbooks * EDR/XDR solutions * NDR solutions * Email security and anti-phishing platforms * Deception technologies * Threat intelligence platforms * Security data lakes and analytics platforms Integrate defense controls across: * Public cloud environments (AWS, Azure, GCP) * Hybrid data centers * SaaS platforms * Enterprise networks, endpoints and mobile * OT/IoT (in partnership with OT sr. cybersecurity leadership) Additional Responsibilities: * Drive automation, AI/ML integration, and policy-as-code for response workflows in collaboration with Cloud Security and other senior security leaders. * Enable automated containment and remediation capabilities. * Partner with Incident Response and Cyber Counter Adversary leadership for operational efficiency and maturity uplifts. * Support purple team exercises to validate detection and response effectiveness. * Integrate strategic, tactical, and operational threat intelligence into engineering roadmap. * Translate threat actor activity into detection content and control enhancements. * Support M&A security integrations and divestiture disentanglement. * Ensure compliance with global regulatory regimes (e.g., HIPAA, GDPR, SOX, FDA/GxP where applicable). * Establish KPIs, OKRs, and performance dashboards. * Establish control validation framework. * Lead breach simulation and continuous control monitoring as needed to support Cyber Defense senior leaders * Report measurable defense maturity to executive leadership and other senior leaders. * Lead global team of detection engineers, platform engineers, and automation specialists. * Establish engineering career paths and succession planning. * Enterprise financial management and planning experience. * Follows information security trends within and outside of work with executive leadership to strategize and recommend changes and updates to company. Qualifications: Education: * Master's Degree in Business Administration, Computer Science, Information Technology or any other related discipline or equivalent related experience. Preferred Certifications: * Certified Cloud Security Professional (CCSP) * Certified Information Systems Security Professional (CISSP) * Offensive Security Certified Professional (OSCP) * GIAC Certified Intrusion Analyst (GCIA) * GIAC Certified Enterprise Defender (GCED) * GIAC Certified Incident Handler (GCIH) * Certification in Information Security Strategy Management (CISM) * Certified Information Systems Auditor (CISA) * Information Technology Infrastructure Library (ITIL) * Project Management Professional (PMP) Certification Work Experience: * 12+ years of directly-related or relevant experience with 8+ years in a managerial capacity, preferably in information security. Behavioral Skills: * Coaching and Mentoring * Creativity & Innovation * Decision Making * Leadership Skills * People Management * Planning * Risk-taking Technical Skills: * IT Risk Management * IT Controls * Cyber Attack Mitigation * Enterprise IT Management * Network Security * Service Level Maintenance * Information Security Strategy Continuity * Threat Modelling * Information Security Strategy Standards (SOX, ISO 27001/27002, COBIT, ITIL, NIST, PCI) Tools Knowledge: * Microsoft Office Suite * Security Tools - CSPM, CWPP, CDR, CNAPP, SIEM, EDR, Email Security Gateway, SOAR, Firewall, Anti-virus, Firewalls, VPN IDS/IPS, AV, proxies, etc. * Security Testing Tools - Open Source and COTS security tools * Threat Intelligence Tools * Vulnerability Testing Tools We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit ___ Full time Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law. The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory. Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email ___. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned Affiliated Companies: AmerisourceBergen Services Corporation

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today! Summary: The Senior Director of Enterprise Security Architecture (ESA) leads the definition, governance, and enforcement of enterprise-wide security architecture strategy for the enterprise. This leader is accountable for aligning cybersecurity architecture with business strategy, digital transformation, regulatory obligations, and risk appetite. The role oversees reference architectures, security design standards, architecture review boards (ARB), security requirements engineering, and integration with Enterprise Architecture (EA), Cloud, Data, AI, Infrastructure, and Application domains. This role is responsible for building strong partnerships with technology teams, other corporate support functions, and other Information Security organizations to protect the corporate brand, data, and assets and is responsible for the design, implementation, operation, and maintenance of an information security framework, processes, and systems, that protect the business, services, information and systems against unauthorized use, disclosure, modification, damage, and loss. The position partners closely with the CISO, other Information Security Sr. Leaders, and other Technology Leadership teams to establish a vision and strategy required to ensure scalable, measurable, and continuously improving defense capabilities across all security domains in collaboration with other information security domain leaders and partner organizations. Our employee experience is a strategic priority for our company. Our leaders are accountable for leading with purpose, fairness, and equity. They are responsible for building and developing diverse teams, maintaining a safe and inclusive environment, setting clear priorities, and holding self and team accountable for executing with excellence. Primary Responsibilities: * Define and maintain the enterprise security architecture vision and multi-year roadmap. * Align security architecture with corporate strategy, digital transformation, and technology modernization initiatives. * Establish target-state architectures incorporating Zero Trust principles in collaboration with other Information Security and Technology leaders. * Translate risk appetite into enforceable architectural guardrails. Develop and maintain standardized reference architectures for: * Cloud and hybrid infrastructure * Identity & Access Management * Data protection and privacy * Network segmentation * Application security * AI/GenAI security * OT/IoT (in partnership with OT sr. cybersecurity leadership) Additional Responsibilities: * Ensure security-by-design integration into SDLC and platform engineering models. * Govern architecture artifacts across global business units. * Chair or co-chair the Security Architecture Review Board (SARB). * Define security architecture review processes and risk exception workflows. * Establish measurable design assurance criteria. * Partner with Enterprise Architecture for integrated technology governance. * Translate regulatory and risk requirements into technical control standards. * Ensure compliance with global regulatory regimes (e.g., HIPAA, GDPR, SOX, FDA/GxP where applicable). * Maintain or enforce enterprise security standards library mapped to NIST, ISO, SOC 2, PCI, HIPAA, GDPR, etc. * Enable reusable security requirement models for programs and projects. * Drive automation of control validation and policy-as-code enforcement. * Support regulatory readiness across global jurisdictions. * Ensure architecture supports data residency and sovereignty obligations. * Collaborate with Legal, Privacy, and Compliance on emerging regulatory impacts. * Provide defensible architecture documentation for audit and regulatory review. * Lead security architecture assessments for acquisitions. * Define integration and divestiture security blueprints. * Support large-scale ERP, digital, AI, and cloud transformation programs. * Establish rapid risk assessment models for new technologies. * Establish KPIs, OKRs, and performance dashboards. * Track control design effectiveness and systemic risk reduction. * Integrate architecture insights with cyber analytics programs. * Report enterprise architecture risk posture to executive leadership. * Lead global team of security domain architects. * Define operating model across centralized and federated teams. * Establish architecture career paths and technical competency frameworks. * Enterprise financial management and planning experience. Qualifications: Education: * Master's Degree in Business Administration, Computer Science, Information Technology or any other related discipline or equivalent related experience. Preferred Certifications: * Certified Cloud Security Professional (CCSP) * Certified Information Systems Security Professional (CISSP) * Sherwood Applied Business Security Architecture (SABSA) * Open Group Architecture Framework (TOGAF) * Certified in Risk and Information Systems Control (CRISC) * Certification in Information Security Strategy Management (CISM) * Microsoft Certified: Cybersecurity Architect Expert (SC-100) * Information Technology Infrastructure Library (ITIL) * Offensive Security Certified Professional (OSCP) * Project Management Professional (PMP) Certification WORK EXPERIENCE: * 12+ years of directly-related or relevant experience with 8+ years in a managerial capacity, preferably in information security. SKILLS & KNOWLEDGE: Behavioral Skills: * Coaching and Mentoring * Creativity & Innovation * Decision Making * Leadership Skills * People Management * Planning * Risk-taking Technical Skills: * IT Risk Management * IT Controls * Cyber Attack Mitigation * Enterprise IT Management * Cloud Security * Network Security * Identity & Access Management * Application Security * Service Level Maintenance * Information Security Strategy Continuity * Threat Modelling * Information Security Strategy Standards (SOX, ISO 27001/27002, COBIT, ITIL, NIST, PCI) Tools Knowledge: * Security Tools - CSPM, CWPP, CDR, CNAPP, SIEM, EDR, Email Security Gateway, SOAR, Firewall, Anti-virus, Firewalls, VPN IDS/IPS, AV, proxies, etc. * Security Testing Tools - Open Source and COTS security tools * Threat Intelligence Tools * Vulnerability Testing Tools We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit ___ Full time Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law. The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory. Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email ___. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned Affiliated Companies: AmerisourceBergen Services Corporation

Job Description We are a global law firm with a powerful strategic focus and real momentum. Our industry-focused strategy is seeing us take on pioneering work in places that others have yet to reach. Our shared values define our culture and our workplace. You will find us to be unusually collegial, team-oriented, and ready to innovate. We work seamlessly across practices, offices and around the world. This elimination of boundaries has allowed us to evolve into a law firm that works as hard for its culture as it does for its clients. As an early adopter of advanced eDiscovery technology and methodologies, the Firm's Global eDiscovery Services group provides strategic services to our disputes lawyers and clients. Working alongside other talented professionals, you'll be surrounded by an open and collaborative culture that embraces recognition and professional development. Recognizing the impact of the emerging cloud-based data sources on discovery, the NRF eDiscovery team is early to build on a position dedicated to the preservation, collection and protection of digital evidence in connection to litigation and regulatory matters. In coordination with eDiscovery Services leadership, the Senior Advisor will be pivotal in implementing and actioning strategic and defensible preservation and collection plans for all eDiscovery projects. As a Senior Advisor, your role will be central to evaluating client IT environments and offering recommendations on the technical measures required to preserve and collect digital information in connection to discovery obligations. This involves engaging with clients, client IT and retained vendors, and collaborating closely with senior managers and NRF lawyers. The Senior Advisor will play a pivotal role in ensuring sound digital collections from both cloud and on-premise sources, overseeing evidence intake and upholding the security of original client evidence. This position is full-time remote and can therefore be located in any city where we have a US office. Flexibility to come to the office for trainings or meetings is required. • Lead client-facing IT interviews to document client IT infrastructure, identify preservation requirements and design defensible collection strategies, • Serve as an advisor to case teams, clients, and vendors on best practices for digital evidence preservation and collections, • Oversee and manage forensic vendors to ensure industry-standard methodologies for acquiring, recovering, and preserving evidence from endpoints, servers, cloud services, and mobile devices., • Collaborate with clients and case teams to apply legal holds and execute and guide collections from enterprise systems such as M365 Purview, Google Vault/Workspace, Slack, and other collaboration and document management platforms, • Provide consultative guidance to case teams to advise on client in-house eDiscovery capabilities, search construction and preservation and collection approaches, • Maintain meticulous documentation of evidence handling, including chain of custody forms, intake records and collection notes, • Coordinate and manage secure intake of physical media and digital collections, • Partner with leadership to refine preservation and collection playbooks, workflows, and best practices as data sources and cloud applications evolve, • Remain current with emerging data sources, forensic tools, and evolving preservation and collection trends, • Contribute to project management tasks, including reporting, workflow improvement, and cross-team collaboration, • Continue to grow and refine the department's preservation and data collection service model, • Work directly with industry leaders and lawyers in the Firm's Information Governance, Cyber and eDiscovery practices, • Participate in SMART goal initiatives focused on professional development and achieving career objectives Please note this job description does not cover or contain all activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. • Bachelor's degree in a technical field (computer science, information systems, engineering or related discipline), • Minimum of 7+ years of experience in litigation support, eDiscovery, forensic technology or IT systems administration with a focus on collections and preservation, • Deep knowledge of computer operating systems, (Windows, Mac, Linux and Unix) and enterprise IT environments, • Strong knowledge of IT systems, including hardware and networking concepts, architecture and protocols, • Proficiency with enterprise eDiscovery and compliance tools (M365 Purview eDiscovery Standard/Premium, Google Vault/Workspace, etc.), • Demonstrated ability to consult with clients, IT stakeholders, and legal teams on defensible preservation and collection strategies, • Proven expertise with (or exposure to) emerging data sources (e.g., Slack, Teams, ephemeral messaging, SaaS, IoT), with the ability to adapt preservation and collection techniques to evolving platforms, • Excellent communication and interpersonal skills; able to interface with all levels of the organization and external clients, • Ability to manage multiple projects, attention to detail and thrive in a fast-paced environment, • Ability to work efficiently under rigorous deadlines in high-pressure situations, • Excellent analytical and problem identification and resolution skills, • Flexible, proactive, resilient, and adaptable in a fast-paced environment. Flexibility for occasional travel, • Experience overseeing or working with an eDiscovery and forensic vendors, • Experience in Microsoft 365 Purview including components of eDiscovery licensing, • Familiarity with scripting/automation (PowerShell, SQL, Python) and databases, • Knowledge of Microsoft Purview for application of data retention policies, • Strong knowledge of performing content search, data governance, and defensible collection workflows, • Technical understanding of the EDRM and forensic collection best practices, • Experience with digital forensic and collection tools, such as FEC, FTK, Cellebrite, Magnet Axiom, EnCase, etc.), • Industry certifications (MCSE, MCSA, CEDS, GFCE, EnCE, CISSP, RCA, etc) Norton Rose Fulbright US LLP is committed to providing employees with a comprehensive and competitive benefits package that supports you, your health, and your family. Benefit packages include access to three medical plans, dental, vision, life, and disability insurance. Employees can also access pre-tax benefits such as health savings and flexible spending accounts. Norton Rose Fulbright helps provide financial security by allowing employees to participate in a 401(k) savings plan and profit-sharing plans if eligible. Full- time employees are eligible to access fertility benefits designed to support fertility and family-forming journeys. In addition to the Firm's health and welfare benefits above, we offer a competitive paid time off plan, which provides a minimum of 20 days off based on your role and tenure with the firm. The firm offers a generous paid parental leave benefit allowing parents to take a minimum of 14 weeks of paid leave to bond with your newborn, or adopted child(ren). Employees are also entitled to 11 Firm holidays. Norton Rose Fulbright US LLP is an Equal Opportunity Employer and complies with all applicable federal laws and their implementing regulations that require the collection and recording of certain data and information. The information we receive will not be used to make any decision regarding employment and will be kept separate from your application. Similarly, self-identification information is kept confidential and used only in accordance with applicable federal laws and regulations. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.Norton Rose Fulbright is committed to providing reasonable accommodation as an Equal Opportunity Employer to applicants with disabilities. If you require assistance or accommodation to complete your application, please contact ___. Please provide your contact information and a description of your accessibility issue. We will make a determination on your request for reasonable accommodation on a case-by-case basis. ___is a registered trademark of the U.S. Department of Homeland Security. This business uses E-Verify in its hiring practices to achieve a lawful workforce.

ServiceNow Senior Consultant Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. Recruiting for this role ends on 05/29/2026. Work You'll Do Deloitte provides ServiceNow risk and security services in the following areas based on the client's immediate and long-term needs. By coupling our business and cyber risk process functional experts on platform automation and integration with our security domain leaders across consulting services, Deloitte can provide a full spectrum of services including: Advise - process and strategy roadmaps, implementation plans and business case development, quantitative return on investment, program and target operating model, data strategy & governance, risk & control framework, content definition & standardization, training and end user enablement Implement - configuration and as needed, customized, solutions on ServiceNow Security Operations (Security Incident Response and Vulnerability Response) and Integrated Risk Management (IRM) applications utilizing accelerators via pre-built templates and proofs of concept Operate - manage Cyber Security programs ranging from keeping the lights on for the client's environment (e.g. upgrades, access help desk) to full-service use case development and dashboards As a ServiceNow Senior Consultant - Functional, you will lead the business process design, requirements gathering, and functional configuration of ServiceNow solutions that drive visibility and automation across key components of our clients' cyber and risk programs. This role requires a combination of ServiceNow platform expertise, business analysis capabilities, and consulting delivery experience. You will serve as the bridge between business stakeholders and technical teams, ensuring that platform implementations align with organizational objectives, regulatory requirements, and industry best practices. Some examples of what you will do include: * Lead requirements workshops; document business/functional requirements, specs, and process flows for ServiceNow implementations. * Design target-state processes, operating models, and governance to enable ServiceNow automation. * Conduct current-state assessments and gap analyses; recommend configurations that maximize out-of-the-box (OOTB) capability. * Configure ServiceNow using OOTB features (forms, workflows/Flow Designer, notifications, SLAs, reports/dashboards, roles/ACLs). * Own functional design and configuration for security/risk solutions (IRM, SecOps, ITOM, ITAM, TPRM). * Define data models, risk/control frameworks, taxonomies, scoring, and reporting structures in ServiceNow. * Lead workstreams end-to-end: plan and deliver deliverables, manage timeline/budget/RAIDs, and provide clear status to leadership. * Partner with senior stakeholders (CIO/CRO/CISO teams) to align platform outcomes to strategy and risk appetite; drive decisions. * Facilitate alignment sessions, steering committees, and executive readouts on progress, risks, and key choices. * Lead deployment/cutover for complex, large-scale organizations across industries. * Plan and execute UAT; develop training and enablement materials; run demos, testing, and training sessions. * Mentor junior functional consultants on modules, requirements documentation, and client delivery practices. The Team Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments. Skills and Qualifications Required: * BA/BS Degree in Computer Science, Information Systems, Cyber Security, Engineering, Information Technology, Finance, Business, or related field * 4+ years of experience supporting ServiceNow implementation projects in a client-facing functional or business analyst role * 4+ years of business analysis experience including requirements elicitation, process design and documentation, gap analysis, and stakeholder facilitation * 4+ years of consulting delivery experience including client-facing communication, deliverable ownership, and workstream management * 4+ years of work experience consulting with organizations to design and implement one or more of the following ServiceNow modules: * IT Operations Management (ITOM) * IT Asset Management (ITAM) * Integrated Risk Management (IRM) * Security Operations (SecOps) * Third-Party Risk Management (TPRM) * Demonstrated ability to operate as both a ServiceNow platform expert and a business analyst who can independently gather requirements, design processes, and drive client outcomes * Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve * Limited immigration sponsorship may be available Preferred: * 4+ years of hands-on experience with functional configuration of one or more of the following ServiceNow platform solutions: * IT Operations Management (ITOM) * IT Asset Management (ITAM) * Integrated Risk Management (IRM) * Security Operations (SecOps) * Third-Party Risk Management (TPRM) * One or more of the following ServiceNow Certified Implementation Specialist (CIS) certifications: * CIS-Risk and Compliance (CIS-RC) * CIS-Security Incident Response (CIS-SIR) * CIS-Vulnerability Response (CIS-VR) * CIS-Third-Party Risk Management (CIS-TPRM) * CIS-Hardware Asset Management (CIS-HAM) * CIS-Software Asset Management (CIS-SAM) * CIS-Service Mapping (CIS-SM) * CIS-Discovery (CIS-DISCO) * CIS-Event Management (CIS-EM) * ServiceNow Certified System Administrator (CSA) * ServiceNow Certified Application Developer (CAD) for candidates with technical configuration depth * Experience with RSA Archer or other GRC platforms, particularly in migration or integration scenarios with ServiceNow * Experience with CMDB architecture and Common Service Data Model (CSDM) design and implementation * Experience with ServiceNow Performance Analytics, reporting, and executive dashboards * Knowledge of regulatory frameworks and standards such as NIST CSF, ISO 27001, SOX, GDPR, or HIPAA * Certifications such as CISSP, CISM, CISA, or CRISC The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $118,700 to $218,600. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

ServiceNow Consultant Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. Work You'll Do Deloitte provides ServiceNow risk and security services in the following areas based on the client's immediate and long-term needs. By coupling our business and cyber risk process functional experts on platform automation and integration with our security domain leaders across consulting services, Deloitte can provide a full spectrum of services including: Advise - process and strategy roadmaps, implementation plans and business case development, quantitative return on investment, program and target operating model, data strategy & governance, risk & control framework, content definition & standardization, training and end user enablement Implement - configuration and as needed, customized, solutions on ServiceNow Security Operations (Security Incident Response and Vulnerability Response) and Integrated Risk Management (IRM) applications utilizing accelerators via pre-built templates and proofs of concept Operate - manage Cyber Security programs ranging from keeping the lights on for the client's environment (e.g. upgrades, access help desk) to full-service use case development and dashboards As a ServiceNow Consultant - Functional, you will support the business process design, requirements gathering, and functional configuration of ServiceNow solutions that help organizations achieve better visibility and automation across their cyber and risk programs. This role requires a combination of ServiceNow platform knowledge, business analysis skills, and consulting experience. Working alongside senior functional consultants, you will help translate business needs into platform configurations that align with organizational objectives and industry best practices. Some examples of what you will do include: * Support requirements workshops and stakeholder interviews; capture and validate business/functional requirements and user stories. * Document "as-is" and "to-be" processes (flows, roles/RACI, inputs/outputs, controls/metrics) to support ServiceNow automation. * Analyze current processes and tools to identify gaps, efficiencies, and configuration opportunities within ServiceNow. * Demonstratable understanding of ServiceNow out-of-the-box features (forms, workflows, notifications, SLAs, reports/dashboards, roles/ACLs) under team lead guidance. * Contribute to functional design and build for security/risk solutions (IRM, SecOps, ITOM, ITAM, TPRM), including requirements traceability to configuration. * Document data models, risk/control structures, taxonomies, scoring, and reporting requirements within ServiceNow. * Produce project artifacts (requirements, design specs, process documentation, test plans, training/job aids) in alignment with delivery standards. * Develop UAT scenarios and scripts; coordinate test execution, triage defects, and support retesting and sign-off. * Facilitate module demos, user testing sessions, and end-user training with prepared scripts and supporting materials. * Support deployment and cutover activities (checklists, release notes, validation) for large-scale implementations. * Communicate progress, risks, and next steps clearly to client stakeholders and internal team members; escalate issues as needed. * Build strong working relationships with client counterparts; support senior team members in meetings with executive risk stakeholders. The Team Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments. Skills and Qualifications * BA/BS Degree in Computer Science, Information Systems, Cyber Security, Engineering, Information Technology, Finance, Business, or related field * 2+ years of experience supporting ServiceNow implementation projects in a client-facing functional or business analyst role * 2+ years of business analysis experience including requirements gathering, process documentation, and stakeholder communication * 2+ years of consulting or professional services experience in a client-facing delivery role * 2+ years of work experience consulting with organizations to design and implement one or more of the following ServiceNow modules: æ IT Operations Management (ITOM) æ IT Asset Management (ITAM) æ Integrated Risk Management (IRM) æ Security Operations (SecOps) æ Third-Party Risk Management (TPRM) * Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve * Limited immigration sponsorship may be available æ CIS-Security Incident Response (CIS-SIR) æ CIS-Vulnerability Response (CIS-VR) æ CIS-Third-Party Risk Management (CIS-TPRM) æ CIS-Hardware Asset Management (CIS-HAM) æ CIS-Software Asset Management (CIS-SAM) æ CIS-Service Mapping (CIS-SM) æ CIS-Discovery (CIS-DISCO) æ CIS-Event Management (CIS-EM) æ IT Asset Management (ITAM) æ Integrated Risk Management (IRM) æ Security Operations (SecOps) æ Third-Party Risk Management (TPRM) * ServiceNow Certified System Administrator (CSA) * ServiceNow Certified Application Developer (CAD) for candidates with technical configuration depth * Experience with RSA Archer or other GRC platforms, particularly in migration or integration scenarios with ServiceNow * Experience with CMDB architecture and Common Service Data Model (CSDM) design and implementation * Previous Consulting or Big 4 experience * Experience with ServiceNow reporting and dashboards * Knowledge of regulatory frameworks and standards such as NIST CSF, ISO 27001, SOX, GDPR, or HIPAA * Certifications such as CISSP, CISM, or CISA The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $88,600 to $163,100. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

Are you someone who challenges the status quo, acts autonomously, and has experience leading data management and governance in broadscale transformation programs? Are you ready to take the next leap in your career by leveraging your experience to influence product strategy and build a world-class product organization that will have a global impact? Bring your expertise in IGA, IAM, PBAC, and RBAC to help modernize our security platforms, streamline processes, and ensure robust protection of sensitive assets. If you're passionate about translating security strategy into tangible business outcomes, thrive in a collaborative environment, and are ready to elevate your career, this exciting opportunity is for you! Work you'll do As an Identity and Access Management (IAM) Manager, play a pivotal role in shaping the future identity and access management for our dynamic enterprise. You will champion the design, implementation, and continuous enhancement of application security controls, driving transformation across authentication, authorization, and identity governance solutions. With a focus on innovation, scalability, and best-in-class security, you'll collaborate with cross-functional teams to align security strategy with evolving business needs and regulatory requirements. * As an IAM Manager, you will own delivery execution for CIAM/IGA/PBAC access management initiatives, scope, plan, dependencies, and release readiness, supporting GES service offerings. * Collaborate with business leaders, product owners, security architects, and cross-functional teams to translate security requirements into delivery plans (backlog, milestones, cutover and testing) for authentication, authorization, and identity governance enhancements. * Lead implementation teams responsible for deploying solutions and ensuring timely, secure, and effective rollouts. * Operationalize and enforce security standards through best practices, reference patterns and application onboarding checklists to drive consistency, reliability, and scalability across the platform. * Continuously improve access controls by identifying gaps through incidents and audit findings, driving remediation, and reducing repeat issues through standard patterns. * Drive detailed implementation across application/product teams by managing requirements, integration design, testing, and cutover for prioritized Authorization and governance capabilities. . * Own delivery of the approved roadmap by maintaining a transparent execution plan, reporting progress/risks, and driving decisions needed to hit release targets. * Build and nurture strong partnerships with our Quality and Risk Management (QRM) and Global Cyber teams to align delivery, review designs, document exceptions, obtain approvals, and ensure audit-ready evidence. * Drive adoption of CIAM patterns and governance workflows across teams through enablement, onboarding support, and a clear 'definition of done' for access controls. * Run operating cadence (weekly delivery sync, RAID log, release readiness reviews) and communicate priorities, status, risks, and dependencies. * Manage vendor integrations and delivery outcomes (SSO federation onboarding, lifecycle management, support model, SLAs) to ensure new capabilities are production ready. The team At Deloitte Tax LLP, our Global Employer Services (GES) Technology Group consultants help multinational clients develop programs, processes and digital offerings to manage a global workforce and the compliance obligations arising from global mobility, business travel and remote working. People within our technology group come from a diverse background - they partner with our go-to-market teams and global clients to solve challenging problems and design experiences and products that anticipate what our Deloitte clients will want and also solutions that keep them compliant with global and local regulations. Required * Bachelor's degree in computer science, information security, software engineering, or a related discipline. * Ability to perform job responsibilities within a hybrid work model that requires US Tax professionals to co-locate in person 2 - 3 days per week. * 5+ years of experience in Identity Access Management (IAM), Identity Governance (IGA), CIAM, or application security, with a background in cloud service platforms (e.g., AWS, Azure) and focusing on product security. * Demonstrated subject matter expertise in IGA, IAM, PBAC, and RBAC technologies and strategies. * Hands-on expertise delivering large scale CIAM/IGA capabilities using PBAC/RBAC patterns, including rollout and operationalization. * Expertise in policy-as-code for PBAC implementations (e.g. Cedar, Rego, JSON, YAML). * Proven ability to influence teams, drive adoption of standards, build strong relationships across technical and non-technical stakeholders. * Demonstrated experience in vendor management, evaluating and integrating security products into enterprise environments. * Ability to travel up to 10%, on average, based on the work you do and the clients and industries/sectors you serve. * Limited immigration sponsorship may be available. * One of the following accreditations obtained: * Licensed CPA in state of practice/primary office if eligible to sit for the CPA * If not CPA eligible: * Licensed attorney * Enrolled Agent * Technology Certifications * AWS Certified Solutions Architect * Certified Information Systems Security Professional (CISSP) * Certified SAFe Product Owner / Product Manager * Microsoft Certified Solutions Developer (MCSD) * Microsoft MCSD Certification * Project Management Professional (PMP) * Six Sigma (Green or Black Belt) Preferred * Certified Identity and Access Manager (CIAM), or other IGA/IAM-focused credentials. * Previous experience with Big 4 or other large technology consulting firms. * Experience with global/multinational businesses. * Experience in end-to-end product lifecycle, specifically implementing product security. * Ability to visualize and communicate and collaborate effectively across teams and convey complex security topics to all audiences. * Expertise in creating and implementing efficient processes and standards in large organizations. * Knowledge of risk management and compliance expectations related to authentication and authorization for regulated environments. * Experience in end-to-end application security solution design. * Strong written and verbal communication skills, evidenced by experience collaborating across technical and non-technical teams. * Excellent interpersonal and organizational skills, with the ability to handle diverse situations, complex projects, and changing priorities, behaving with passion, empathy, and care. The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $111,090 to $235,170. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. Information for applicants with a need for accommodation:Hyperlink: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

Une société internationale de haute technologie recherche un Directeur de la cybersécurité pour diriger la cybersécurité et la conformité réglementaire pour ses opérations aux États-Unis. Le candidat idéal doit posséder 10 ans d'expérience en cybersécurité, avec des preuves de leaders

We are seeking a strategic, hands‑on Director of Cyber Security to lead and manage enterprise‑wide cybersecurity initiatives. The ideal candidate brings deep expertise in cybersecurity governance, risk management, audit compliance, and policy development. Establish and manage a robust enterprise

A major financial institution is seeking a Principal Engineer III - Cyber to lead cybersecurity efforts and ensure compliance with security standards.The role involves the development and enforcement of cloud security strategies, conducting risk assessments, and collaborating with various teams to e

Job Description MealSuite, an Inc. 5000 Fastest-Growing Company, is a privately owned SaaS organization comprising 200+ team members across the globe, with hub locations in Cambridge, ON, Canada, Dallas, TX, USA, and Ho Chi Minh City, Vietnam. Our suite of end-to-end foodservice technology solutions helps professionals across healthcare and aging services streamline their operations, save time, reduce food waste, and meet regulatory requirements, so they can focus on what matters most: improving the quality of patient and resident care. We’re looking for our next keen and innovative Information Technology Risk Management Specialist to join our Security, Privacy & Compliance team. Reporting to the Director, Security, Privacy & Compliance, you’ll be responsible to support ongoing delivery of IT Security, Privacy and Compliance risk management roadmap by acting as the Subject Matter Expert for IT risk management in three key domain areas, e.g. third party IT risk management, user cyber awareness and crypto agility. A day in the life as a Information Technology Risk Management Specialist: • Manage IT Risks – Promptly identify IT risks, develop appropriate remediation options and ensure effective deployment of IT risk management controls in key domain areas. Conduct IT risk assessments and support proactive ongoing management and compliance with governance frameworks and standards for third parties, cybersecurity tooling, user awareness trends and crypto agility posture., • Lead Third Party IT Risk Management Program – Act as the main point of contact for Third Party IT Risk Management, e.g. portfolio risk, control, performance and compliance posture monitoring and reporting., • Lead IT Risk Management Awareness and Training – Develop and deliver Cyber Awareness October Program components. Act as the main point of contact for User Cyber Training Program across the organization, e.g. ensure training content relevance and timeliness; support risks and controls alignment to target metrics; monitor and report trends., • Lead Crypto Agility Risk Management Program – Create and maintain the Crypto Posture Library across the organization, ensuring ongoing currency, completeness, accuracy and availability. Lead the development and delivery of the Cyrpto Agility Risk Management Program., • Ensure IT Risk Compliance – Develop, implement, monitor and track IT risk management controls and metrics to target compliance, timely identify and enable effectively remediation of deviations. If the below describe your knowledge, experience and character, this role could be for you: • I have knowledge of IT risk management frameworks, compliance standards, techniques, artefacts, and industry best practices., • I gained my knowledge through 2-3 years of experience in IT or third-party IT risk management, IT Governance, Risk, and Compliance, user cyber awareness, IT Risk reporting, or IT documentation., • I have experience with metrics development, measurement, reporting best practices, governance document management and IT risks and controls domains., • I’m familiar with cryptography or am very eager at exploring the emerging field of quantum computing and crypto agility., • I’m exceptional at analysing information critically, cross-functional collaboration globally and being adaptable and composed in the light of change management., • I’m extra passionate about continuously honing my knowledge, especially within the realm of IT risk management., • I have a proven ability to lead multiple projects concurrently, communicate effectively and collaboratively., • I’m willing to occasionally travel and have a valid passport and no travel restrictions that limit my ability to cross the border between Canada and the USA (and Vietnam if required for role)., • I thrive in an agile environment that is constantly changing and encourages team members to collectively collaborate and communicate., • I love to be directly involved in projects and initiatives that offer continued learning and endless opportunity to express my ideas and build my leadership skills, We know imposter syndrome can be REAL when applying for a new role, but please don't let the confidence gap prevent you from taking a leap and applying for your dream job. Your future self will thank you! More to love about working at MealSuite: • We are passionate people that care about others. The heart of what we do comes down to our mission to Deliver smiles and satisfaction to the continuum of care through an all-in-one foodservice management technology. Learn more about what we do here., • We’ve built a progressive culture that values teamwork and innovation. We listen to all voices and entrust team members with tasks that make a significant impact on the communities we serve., • We’re growing sustainably. A career with MealSuite offers the innovation and agility of a startup matched with the stability of an established company in a growing industry., • We take care of our employees too! Here are just a few of the great things we offer:, • Unlimited paid time off – yeah, you read that right! We trust our employees to build their own version of balance so they can feel rejuvenated to bring their best every day., • Health benefits – this includes medical, dental, and vision options, life & disability insurance, & paid maternity and parental leave., • Hybrid flexibility – we value the collaboration, mentorship and learning that come from physically working next to one another, as well as the benefits that remote work can offer., • Work-life balance – this is supported by the fact that more than 90% of current employees agree that their leader supports their wellbeing., • An inclusive workplace – women account for 53% of our employees and 58% of people leaders., • Participation in our equity program – we’d love for you to share in MealSuite's success as we continue to grow!, • Opportunities for career development and advancement – we support our employees in pursuing and achieving their professional goals., • Purposeful work with a positive community impact – more than 90% of our North American employees agree that the company’s purpose aligns with their personal values. Learn more about our values at MealSuite.com/Careers. More than an hour away from the office location? Apply anyway, and we can talk through your options! Compensation: $78,000.00–$84,000.00 CAD per year / $70,000 - $75,000 USD We want to ensure that every qualified individual has an equal opportunity to work with us. If you require accommodation to our application process, please contact . MealSuite uses AI-assisted tools during parts of the hiring process, including screening and workflow automation. All final hiring decisions are made by people. This is a current vacancy, and we are actively hiring for this position.

Job Description Job Title: Senior Project Manager – Vulnerability Remediation (Healthcare Domain) Location: Onsite Experience: 10–15+ years Employment Type: Contract Rate: 60-65$/Hr. Role Summary The Senior Project Manager will lead and manage large-scale vulnerability remediation programs across healthcare application portfolios and infrastructure systems. This role will ensure timely identification, prioritization, and remediation of Critical and High vulnerabilities aligned to regulatory and compliance requirements (HIPAA, HITECH, CMS, HITRUST). The candidate must have hands-on experience driving remediation activities for both application development (code, libraries, APIs, and platform vulnerabilities) and infrastructure (patching, server configuration, network, and cloud security issues). Key Responsibilities • Lead end-to-end program execution for vulnerability remediation related to applications, databases, servers, cloud environments, and legacy healthcare platforms., • Prioritize and track remediation of CVITs, VITs, vulnerabilities in code, patch deployments, and configuration fixes across technical teams., • Work with security, DevOps, application development, enterprise architecture, and infrastructure teams to systematically remediate scan findings., • Conduct backlog grooming, sprint planning, release coordination, and delivery tracking for remediation activities., • Analyze vulnerability scan reports and dashboards from tools such as Qualys, Tenable, Rapid7, CrowdStrike, Microsoft Defender, etc., • Develop remediation plans aligned to exposure of PHI/PII, severity, exploitability, and system criticality., • Prepare and present weekly status decks, risk registers, and executive scorecards for senior leadership and audit teams., • Oversee SOW deliverables, team onboarding, cross-shore coordination, and stakeholder alignment., • Ensure remediation governance, compliance documentation, and closure of cyber audit findings., • 10+ years of IT project or program management experience, including 5+ years dedicated to security or vulnerability remediation., • Must have experience managing both application development and infrastructure-related vulnerabilities, including:, • Code vulnerabilities (OWASP, dependency issues, API weaknesses, encryption gaps), • Infrastructure vulnerabilities (OS patching, server hardening, cloud misconfigurations, IAM issues), • Deep understanding of healthcare systems and PHI security risks., • Strong knowledge of healthcare compliance frameworks such as HIPAA, HITECH, HITRUST, NIST CSF, CMS., • Experience working in distributed delivery models with offshore/onshore teams., • Proficient in Agile, Scrum, and hybrid methodologies., • Excellent communication, stakeholder influencing, and senior leadership reporting capabilities., • PMP, CSM, SAFe, • CompTIA Security+, CISSP, CISM, • Payer systems (Medicaid, Medicare, Marketplace, Commercial), • Claims processing, provider data, enrollment, pharmacy, member access systems, • Reduction in Critical/High vulnerability backlog, • SLA compliance for remediation (30/60/90-day closure), • Audit remediation closure rate, • Legacy backlog risk reduction, • Operational readiness and stability for healthcare systems

The Armed Security Officer is responsible for responding to all emergency codes, internal/external disaster events as needed and/or requested, conducting preliminary investigations of reported incidents, and performing other security related tasks as directed by a security supervisor/and or Manager.

Familiarity with SOX compliance and data privacy standards. Manage supplier documentation and compliance tracking per company policy.

The Information Technology Data Analyst Lead is responsible conducting full lifecycle analysis to include requirements, design, documentation, testing and validation to support the implementation of data and analytics solutions.Data Analyst must have expertise in methodology, design, specifications,

NOTE: This position must be performed in Washington, DC so relocation to Washington, DC will be required.Recruitment Incentive: Applicants may be eligible for a $75,000 recruitment incentive in accordance with regulatory requirements.Click apply to view full details and eligibility of this recruitme

The Information Technology Data Analyst Lead is responsible conducting full lifecycle analysis to include requirements, design, documentation, testing and validation to support the implementation of data and analytics solutions.Data Analyst must have expertise in methodology, design, specifications,

Mandatory Skills: • 6-10 years' experience with implementing data quality programs in a large global bank or Big Four consulting firm • Solid understanding of the Client ICM, Capital Markets, Commercial Banking, Security & Issuer Services, Research, Reference, and Master Data • Must have exper

The Armed Security Officer is responsible for responding to all emergency codes, internal/external disaster events as needed and/or requested, conducting preliminary investigations of reported incidents, and performing other security related tasks as directed by a security supervisor/and or Manager.

Provide an interface to client information security audits Protect corporate cyber security information day to day Perform information security risk assessments and serves as an internal auditor for security issues Oversee the risk assessment and information security awareness Train all employees in

Use security equipment as prescribed per post and implement all access control measures. Must demonstrate ability to learn security operation and procedures. At all times, convey CAS’s positive attributes of customer-focused security.

The Armed Security Officer is responsible for responding to all emergency codes, internal/external disaster events as needed and/or requested, conducting preliminary investigations of reported incidents, and performing other security related tasks as directed by a security supervisor/and or Manager.

Job Summary Under general supervision, manage the relationship with existing accounts.Responsible for managing a book of business for existing accounts and generating revenue on assigned accounts.Serve as the primary interface for all products and services and create demand for the organization's pr

The Information Technology Data Analyst Lead is responsible conducting full lifecycle analysis to include requirements, design, documentation, testing and validation to support the implementation of data and analytics solutions.Data Analyst must have expertise in methodology, design, specifications,

Job Summary Use your clinical expertise to impact millions of lives through your interactions with care providers.Our clinical roles enable you to act as a mentor and ambassador for the quality of health improvement by engaging with care providers and making recommendations or educating them on key

This position requires diligent values of integrity and compliance with all applicable Regulations. Prepare final hospital and home office cost reports, completing comparative analysis of the cost report versus the financial statement and compliance checklist prior to submission, for multiple facili

Turn a Tech Layoff or a Career Gap Into a Reset for a Better Career A layoff or a Career Gap can shake your confidence—even if you did nothing wrong.Downsizing, reorganizations, and budget cuts are business decisions, not personal failures.The tech industry still needs skilled developers — you j

The Armed Security Officer is responsible for responding to all emergency codes, internal/external disaster events as needed and/or requested, conducting preliminary investigations of reported incidents, and performing other security related tasks as directed by a security supervisor/and or Manager.

Allied Universal - - Responsibilities: Perform security patrols of designated areas on foot or in vehicle; Watch for irregular or unusual conditions that may create security concerns or safety hazards; Sound alarms or call police or fire department in case of fire or presence of unauthorized person

Allied Universal - - Responsibilities: Observe and remain vigilant for signs of crime, disorder, hazard, and unusual activity; Patrol on foot, bicycle, or via a vehicle to check for unsafe conditions, blocked entryways, security violations, mechanical problems, and unauthorized individuals; Orally

Conduct regular and random patrols around the location and perimeter, observe for unusual activity or security-related concerns, and report conditions according to post instructions.

Walden Security - - Responsibilities: Protect the Industrial or Commercial property of our clients against fire, vandalism and illegal entry.