Security Engineer

• Assist in conducting cybersecurity due diligence by reviewing basic contracts to identify cybersecurity requirements for suppliers, subcontractors, and vendors.
• Monitor supplier and vendor cybersecurity performance to identify compliance with contractual obligations and regulatory standards.
• Support the documentation and tracking of supplier and vendor compliance issues, and assist in managing routine communication with suppliers and vendors regarding cybersecurity incidents.
• Help ensure procurement and subcontract processes align with cybersecurity regulations, including DFARS 252.204-7012, CMMC, organizational requirements, and industry best practices.
• Research and stay informed of evolving regulations, best practices, and standards affecting supplier and vendor compliance with DFARS and CMMC.
• Support the GRC team in developing and implementing a unified CMMC and DFARS compliance program.
• Assist in interpreting and translating cybersecurity regulations (NIST SP 800-171, CMMC, and DFARS 252.204-7012) into actionable guidance and contribute to process improvement.
• Support participation in gap analyses to help identify deficiencies and risks.
• Assist in collecting data for continuous monitoring programs and key performance indicators (KPIs) to track compliance and risks related to suppliers, subcontractors, and vendors handling CUI or FCI.
• Help system owners gather documentation to prepare for internal and external assessments (mock assessments, readiness reviews).

Cybersecurity Compliance Advisory Analyst I

Senior Manager, IT Security & Compliance

Information System Security Manager – ISSM

Information System Security Officer – ISSO

Information System Security Officer

Senior Bank Information Security Governance