Sr. Security Engineer

Senior Security Engineer

Contract / Contract to Hire

Atlanta, GA

Department

Information Security – Governance, Risk & Compliance (GRC)

Job Summary

We are seeking an experienced Senior Information Security Compliance Engineer to support the organization's government compliance program, ensuring adherence to applicable domestic and international regulatory requirements and alignment with mandated cybersecurity and IT compliance frameworks.

The ideal candidate will have a strong background in IT auditing, information security, governance, risk management, and regulatory compliance.

This role will also support broader Information Security Compliance initiatives, including third-party risk assessments, audit readiness, policy and procedure development, security control assessments, and special projects driven by evolving regulatory and cybersecurity requirements.

Work Environment

A hybrid work schedule may be available following the initial onboarding phase, depending on business needs and individual performance.

The hybrid schedule is subject to modification at management's discretion, particularly during audits, assessments, or other business activities requiring additional onsite support.

Key Responsibilities

Information Security Governance, Risk & Compliance

• Support the organization's government compliance program and ensure adherence to applicable regulatory and cybersecurity requirements.
• Evaluate and maintain compliance with NIST SP 800-171 and other applicable security frameworks.
• Conduct IT security audits, risk assessments, vulnerability assessments, and compliance reviews.
• Identify, evaluate, collect, and validate security control evidence to demonstrate compliance with regulatory and industry requirements.
• Develop, implement, and maintain corporate information security policies, standards, controls, and procedures.
• Research and interpret new regulatory requirements and provide clear, actionable recommendations to senior leadership.
• Support third-party risk management activities, including reviewing and responding to security and compliance questionnaires.
• Develop and maintain audit documentation, processes, procedures, and compliance evidence.
• Collaborate with internal teams to identify compliance gaps, recommend corrective actions, and strengthen the organization's security posture.
• Support special projects related to emerging cybersecurity regulations and compliance requirements.

Security Engineering & Risk Management

• Design, evaluate, implement, and maintain security systems and controls to protect organizational information assets.
• Perform security risk assessments, vulnerability testing, and control effectiveness evaluations.
• Identify security vulnerabilities and recommend appropriate mitigation strategies and solutions.
• Collaborate with technical teams to implement authentication, authorization, encryption, and access management controls.
• Evaluate security solutions using industry-standard assessment criteria.
• Support the implementation and maintenance of firewalls, intrusion detection systems, and other security technologies.
• Monitor security controls and recommend improvements to strengthen infrastructure protection.
• Assess data sensitivity and recommend appropriate security measures.
• Evaluate emerging security technologies and processes to improve organizational security capabilities.

Security Incident Response & Disaster Recovery

• Support investigations of security incidents, unauthorized access, and potential data breaches.
• Collaborate with technical teams on incident response, forensic investigations, and data recovery activities.
• Develop and maintain security monitoring and alerting procedures.
• Assist in developing, testing, and implementing disaster recovery and business continuity plans.
• Support security incident reporting and communication with technical teams, management, and stakeholders.
• Recommend improvements to incident response procedures and security safeguards.

Audit Readiness, Documentation & Reporting

• Prepare technical reports, compliance documentation, audit findings, and risk assessment summaries.
• Maintain accurate documentation of security controls, policies, processes, and procedures.
• Support the development and maintenance of System Security Plans (SSPs).
• Coordinate with internal stakeholders to collect audit evidence and address compliance findings.
• Recommend improvements to security controls, regulatory processes, and audit readiness.
• Communicate compliance requirements and security risks to technical and nontechnical stakeholders.
• Support security awareness initiatives, employee training, and ongoing compliance education.

Required Qualifications

• Demonstrated experience in Information Technology auditing, including identifying, evaluating, and validating control evidence to demonstrate regulatory and industry compliance.
• Strong understanding of NIST SP 800-171 or comparable cybersecurity and compliance frameworks, including:
• NIST SP 800-53
• NIST Cybersecurity Framework (CSF)
• ISO/IEC 27001 and ISO/IEC 27002
• FedRAMP
• PCI DSS
• CIS Critical Security Controls
• Experience applying security control concepts across different regulatory and compliance environments.
• Ability to research, analyze, and interpret new regulatory requirements and communicate findings to senior leadership.
• Strong written and verbal communication skills across multiple organizational levels.
• Ability to work independently, manage priorities, and deliver clear, actionable results.
• Strong interest in learning and applying government compliance standards.
• Experience developing, reviewing, and interpreting information security policies and procedures.
• Proficiency in identifying, implementing, and managing security controls.
• Experience collecting, reviewing, and interpreting audit evidence and compliance artifacts.
• Solid understanding of IT infrastructure, information security, network architecture, and cloud computing.
• Previous experience working within a Governance, Risk & Compliance (GRC) organization or a comparable role.
• Strong analytical, problem-solving, organizational, and documentation skills.

Preferred Qualifications

• Previous experience with U.S. Government IT compliance requirements.
• Experience developing and maintaining System Security Plans (SSPs).
• Project management experience, including coordinating initiatives across multiple functional teams.
• Foundational understanding of emerging artificial intelligence (AI) tools and technologies.
• Ability to evaluate AI technologies for productivity and automation improvements while identifying security risks, potential misuse, and compliance implications.
• Previous experience working in the aviation industry.

Desired Certifications

One or more of the following professional certifications is highly desirable:

• CISSP – Certified Information Systems Security Professional
• CISA – Certified Information Systems Auditor
• CRISC – Certified in Risk and Information Systems Control

“All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.”