Job Description
Job Description
Are you a dedicated Security Specialist / Lead looking to be a vital asset to a very well known organization based in the downtown Cincinnati area? Don't miss your chance and apply now!
\n
\n
**Contract to Hire**
\n
\n
What you will be doing as the Security Specialist / Lead:
\n
\n - Develop, implement, maintain, and continuously improve CMSNet-wide cybersecurity policies, standards, procedures, and governance practices.
\n - Assist participating agencies in developing and implementing agency-specific security procedures that align with CMSNet requirements while recognizing individual agency governance authority and operational needs.
\n - Maintain alignment with applicable cybersecurity frameworks and requirements, including CIS Controls, the NIST Cybersecurity Framework, CJIS Security Policy, and relevant county and state requirements.
\n - Establish cybersecurity maturity objectives, performance measures, assessment methods, and reporting structures to evaluate and communicate the effectiveness of the cybersecurity program.
\n - Maintain a CMSNet-wide cybersecurity risk register and lead periodic, structured risk assessments across participating agencies.
\n - Assist agencies in interpreting and applying security obligations established through CJIS, Local Rules, Supreme Court Rules of Superintendence, and other applicable judicial, county, or regulatory requirements.
\n - Participate in CMSNet Steering Committee activities and provide cybersecurity expertise regarding policies, governance matters, risk considerations, and multi-agency security initiatives.
\n - Monitor emerging cybersecurity risks, regulatory developments, and industry practices and recommend appropriate changes to policies, procedures, and security controls.
\n - Lead cybersecurity incident response activities throughout the incident lifecycle, including preparation, detection, analysis, containment, eradication, recovery, and post-incident review.
\n - Maintain and regularly update the CMSNet Incident Response Plan, including defined responsibilities, communication protocols, escalation procedures, severity criteria, and notification requirements.
\n - Maintain incident response documentation and resources, including service-level expectations, response runbooks, contact information, notification trees, system references, and architecture documentation necessary to support an effective response.
\n - Coordinate multi-agency incident response activities with Network Support, Application Support, County Technical Services, LASOs, agency leadership, vendors, and other appropriate partners.
\n - Establish and maintain procedures for preserving cybersecurity evidence, including log retention, system imaging, documentation, and chain-of-custody requirements.
\n - Oversee CMSNet enterprise vulnerability management processes, including authenticated and unauthenticated internal and external vulnerability scanning.
\n - Review identified vulnerabilities, assess risk and remediation priorities, and coordinate corrective actions with Technical Services, agency information technology teams, system owners, and contracted vendors.
\n - Track vulnerability remediation efforts and communicate significant risks, unresolved vulnerabilities, and remediation progress to appropriate leadership and stakeholders.
\n - Oversee security governance related to service accounts, multifactor authentication, password requirements, privileged access, and other identity and access management practices.
\n - Serve as a primary cybersecurity advisor and resource for participating CMSNet agencies and agency leadership.
\n - Build and maintain productive working relationships with agency information technology teams, County Technical Services, LASOs, leadership, and other stakeholders to promote coordinated cybersecurity practices.
\n - Assist agencies with adopting or adapting CMSNet cybersecurity policies, standards, and practices while respecting individual agency governance and operational authority.
\n - Coordinate annual cybersecurity awareness and training programs across CMSNet agencies.
\n - Manage and monitor cybersecurity requirements applicable to vendors and third-party service providers, including CJIS background requirements, required security training, data protection obligations, and other contractual security requirements.
\n - Coordinate periodic vendor security reviews, risk assessments, compliance verification, and documentation requirements.
\n - Evaluate cybersecurity considerations associated with proposed technology acquisitions, hosted services, cloud environments, third-party integrations, and other external technology solutions.
\n
\n
\n
What you will need as the Security Specialist / Lead:
\n
\n - Bachelor’s degree in IT, Cybersecurity, Computer Science, or equivalent experience.
\n - 5+ years of hands-on cybersecurity experience in enterprise or government environments.
\n - System Implementation experience, ideally ERP.
\n - AWS experience
\n - Ability to work independently
\n - Broad understanding of security protocols and policies.
\n - Experience advising senior leadership on best practices for IT Security.
\n
Job Tags
Contract work, Local area