Logo
NASC Global, LLC

Information Security Manager

NASC Global, LLC, Atlanta, Georgia, United States, 30383


Overview:NASC GLOBAL, a distinguished HR Consulting and Management firm has been retained by our elite cybersecurity client to identify a dynamic,

hands-on

Information Security Manager

for an exciting contract, remote opportunity.

Job Overview:This role is ideal for someone who can dedicate 10-20 hours per month to oversee, implement, and manage the organization's information security initiatives. You will ensure that security policies, protocols, and practices are in place, mitigating potential risks and aligning with compliance standards.

This is a part-time contract position with flexible hours and the ability to work remotely. The contract duration is estimated to be between 6 to 12 months with potential for extension.

Compensation:

$55.00 to $65.00 hourly.

Key Responsibilities:

Security Management & Oversight:

Provide ongoing management and monitoring of the organization's information security posture.Risk Assessment & Mitigation:

Conduct regular risk assessments, identify vulnerabilities, and recommend mitigation strategies.Policy Development:

Develop, update, and enforce information security policies, procedures, and guidelines.Incident Response:

Manage and respond to security incidents, perform root cause analysis, and implement corrective actions.Compliance Monitoring:

Ensure adherence to relevant security standards and regulatory compliance frameworks (e.g., GDPR, ISO 27001, NIST, SOC 2).Security Awareness:

Develop and lead security awareness training for employees.Access Control:

Implement and maintain access control mechanisms to secure critical systems and sensitive data.Vulnerability Management:

Manage regular vulnerability scans and ensure timely patching and updates to all systems.Audit Support:

Assist with internal and external security audits, including documentation and reporting.Collaboration:

Work with IT, Legal, and other departments to integrate security controls into business processes.

Requirements:

Experience:

5+ years of hands-on experience in information security roles.Experience with incident management, risk assessments, and compliance monitoring.Experience working in part-time/contractual roles preferred.

Certifications:

CISSP, CISM, or equivalent certifications preferred.Technical Skills:

Strong knowledge of firewalls, IDS/IPS, VPNs, endpoint security, and encryption technologies.Knowledge of Frameworks:

Familiarity with NIST, ISO 27001, GDPR, SOC 2, and other security standards.Soft Skills:

Excellent communication, analytical, and problem-solving skills.Other:

Ability to work independently with minimal supervision, self-motivated, and detail oriented.Preferred Qualifications:

Prior experience working in small to medium-sized enterprises (SMEs) or startups.Hands-on experience with cloud security (e.g., AWS, Azure, Google Cloud).Familiarity with DevSecOps practices and tools.