Cybersecurity Risk & Controls Engineer

Our client an IT Services and Consulting company is looking for a Cybersecurity Risk & Controls Engineer for their Atlanta GA/Hybrid location.

Responsibilities:

• This role is responsible for identifying and assessing technology and security risks driving remediation efforts strengthening control frameworks and partnering with engineering teams to implement secure and compliant solutions. The successful candidate will work closely with engineering operations architecture risk audit and control partners to ensure security risks are effectively managed and that security controls are appropriately designed implemented and operating effectively.
• The role combines hands-on security expertise with risk management governance and control oversight responsibilities across blockchain cloud and enterprise platforms. Key Responsibilities
• Conduct security risk assessments and identify control gaps across applications infrastructure cloud and blockchain environments.
• Drive remediation of security findings vulnerabilities audit issues and control deficiencies through closure.
• Design implement and assess security controls to ensure effectiveness and regulatory compliance.
• Partner with engineering architecture and operations teams to integrate security and controls into system design and delivery processes.
• Perform threat modeling security reviews and vulnerability assessments to proactively identify risks.
• Support identity and access management secrets management encryption and key management practices.
• Participate in architecture and solution reviews to ensure alignment with enterprise security standards.
• Support internal audits regulatory reviews and compliance assessments including evidence collection and issue remediation.
• Develop security policies standards procedures and control documentation.
• Monitor risk remediation and control effectiveness metrics and provide reporting to management.
• Evaluate security technologies and recommend solutions to strengthen the organizations security posture.
• Provide security and risk guidance to stakeholders and promote a strong security and control culture.

• Bachelors degree in Computer Science Information Security Information Systems Engineering or a related field (or equivalent experience).
• 5 years of experience in cybersecurity technology risk information security risk management or controls governance.
• Experience conducting security risk assessments and control evaluations.
• Experience driving remediation activities and managing security issues through closure.
• Strong understanding of security frameworks such as NIST ISO 27001 CIS Controls COBIT or similar standards.
• Understanding of cloud security principles and common cloud service providers (AWS Azure or GCP).
• Knowledge of identity and access management secrets management encryption and key management practices.
• Experience supporting audits regulatory assessments or compliance reviews.
• Strong analytical problem-solving and communication skills.
• Ability to work effectively with both technical and non-technical stakeholders.
• Knowledge of blockchain technologies smart contracts cryptography and distributed ledger platforms (Ethereum Hyperledger Besu Canton Solana Polygon etc.).
• Experience with secure software development lifecycle (SSDLC) and DevSecOps practices.
• Experience with vulnerability management and security testing programs.
• Experience with Governance Risk and Compliance (GRC) platforms such as Archer ServiceNow GRC or MetricStream.
• Experience developing risk metrics dashboards and executive reporting.
• Familiarity with CI/CD pipelines and cloud-native security controls.
• Professional certifications such as CISSP CISM CRISC CISA or CCSP.
• AWS Security Specialty (or equivalent).
• Years of Experience: 16.00 Years of Experience
• Top 3 skills required for this role:
• Security Risk & Controls Risk Assessment Control Evaluation
• Remediation NIST/ISO 27001 Cloud Security Audit & Compliance.
• Blockchain Security IAM Cryptography DevSecOps/SSDLC Vulnerability Management GRC Tools CI/CD Security.

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities