Top Cybersecurity Jobs

Lead and execute IT-focused GRC engagements including SOC 1/SOC 2 examinations and SOX Section 404 testing. Assess IT general controls, financial reporting processes, and security configurations. Supervise Associates, ensure compliance with SSAE/IIA standards, and assist clients in risk-aware, regulatory-compliant operations.

The IT Specialist will perform network administration and information assurance tasks, supporting the Navy and Marine Corps Intranet and related peripherals.

Lead enterprise IT and cybersecurity operations including cloud (M365 GCC High/Azure Government), hybrid identity, endpoints, network, backups/DR, vendor/MSP management, and CMMC Level 2 / NIST SP 800-171 compliance; manage staff, incident response, risk register, audits, and report posture to executive leadership.

Lead and execute IT and cybersecurity audits using agile concepts. Develop audit programs, manage audit staff, test internal controls, prepare draft reports, communicate findings to leadership, and recommend remediation to mitigate enterprise IT/cyber risks.

Perform risk-based IT security and compliance audits (policy, general controls, firewall) against FFIEC/GLBA and other guidelines; coordinate assessments, report findings, assist sales, and perform onsite testing with up to 25% travel.

Provide day-to-day IT security and system administration support for Collateral, SCI, and SAP environments. Maintain servers, firewalls, network access, VTC systems, and COMSEC; perform AIS accreditation/C&A activities, inspections, account management, help desk support, hardware/software configuration, vulnerability mitigation, and mentor team members while ensuring compliance with DoD security policies.

The IT Administrator oversees IT operations, data security, and compliance, ensuring the organization meets federal cybersecurity standards and maintains a strong security posture for U.S. government work.

Design, document, and implement a next‑generation UNIX security ecosystem integrating UNIX directories with Active Directory. Lead architecture, access controls, RBAC, and entitlement onboarding; support migrations, UAT, troubleshooting, and collaboration with security, infrastructure, and business stakeholders.

Design, engineer, and implement enterprise UNIX directory and AD integration solutions using Centrify. Develop standards, security controls, and RBAC models; collaborate with security, infrastructure, and project teams; support migrations, entitlement onboarding, troubleshooting, and testing for a next-generation UNIX security ecosystem potentially extending into Azure/AWS.

Support EO&T risk governance by maturing model governance, administering AI solution intake and AI Clearinghouse, conducting third-party vendor risk reviews, automating processes, participating in control testing, enhancing AI governance tools, and producing management reporting to ensure compliance with regulatory and internal standards.

Plan and execute IT audits, review IT policies for compliance (e.g., SOX), assess technology risks, evaluate controls, support system development reviews, collaborate with external auditors, and implement automated audit tools to improve processes and reduce costs.

Lead and manage the internal IT audit function: develop and execute IT audit strategies, assess technical controls and compliance risks, recommend mitigations, collaborate with risk teams on control policies, supervise auditors and consultants, prepare audit reports, and advise IT and business leadership on security and compliance.

Lead development and execution of IT risk and compliance strategy, create policies and controls, coordinate internal/external audits, perform risk assessments, advise executives, and drive training and remediation across IT and business units.

Own IT and systems operations and share security operations: manage device fleet and MDM, administer identity and SSO/SCIM, automate onboarding/offboarding, run IT support and office infrastructure, triage SIEM alerts and phishing exercises, and deliver security tooling using code and IaC.

12-week summer internship for juniors studying IT, MIS, Cybersecurity, or Computer Science. Interns complete a strategic, hands-on IT/cybersecurity project, receive mentorship and training, participate in cohort programming and networking, and present project results to leadership. Opportunity to be considered for full-time roles upon graduation.

The IT Manager in GRC will supervise teams, manage engagements, oversee compliance with regulations, and require advanced knowledge of IT controls and systems.

Provide IT and information assurance support for DoD/SAP environments: maintain servers, firewalls, networks and VTC; perform AIS accreditation, vulnerability mitigation, COMSEC/accountability, account administration, help desk, and system configuration and documentation.

Support DoD IT cybersecurity operations including RMF/ATO activities, eMASS package management, vulnerability scanning and remediation (ACAS/Nessus), system hardening, incident response, and maintaining RMF artifacts (SSP, POA&M) while collaborating with admins and network engineers to ensure compliant, secure IT operations.

Lead risk-based IT audits across mainframe, cloud, ERP, and enterprise environments. Assess IT governance, ITGC, cybersecurity, third-party and OT controls; coordinate SOX testing; report findings to leadership; drive remediation and build team technical audit capability.

Lead design and implementation of enterprise and cloud security architectures (AWS/Azure/GCP). Develop security strategies, conduct cloud and IAM assessments, recommend tools/processes, and guide deployment and incident response improvements. Advise on frameworks (NIST, ISO, COBIT), zero-trust, SIEM, vulnerability management, and emerging tech risks. Train client teams and drive compliance and remediation.

Lead IT Operations for a DoD enclave, oversee ATO documentation and RMF compliance, manage cybersecurity posture, incident response, vulnerability assessments, DR/BCP, and supervise technical staff to ensure system availability and security across the SOMTC infrastructure.

The IT Cybersecurity Engineer is responsible for designing, implementing, and maintaining security solutions, focusing on cloud security and proactive threat mitigation, especially within Microsoft Azure.

The IT Compliance Analyst supports compliance obligations related to IT systems, developing and monitoring compliance activities for the Bulk Electric System and SOX applications.

Manage IT audit and compliance in mobile technology, oversee quality assurance processes, supervise teams, evaluate projects, and communicate findings to leadership.

The IT Compliance Analyst ensures organizational objectives by evaluating IT risk management and governance processes, conducting audits, and ensuring compliance with industry standards.