E-logic is seeking a highly experienced Technical Specialist in Governance, Risk, and Compliance (GRC) to provide staff augmentation services to Suffolk County's Department of Information Technology (DoIT). The resource will work under the management of a Suffolk County IT Manager and will focus on improving the County's cybersecurity posture, achieving policy and standards compliance, and evolving the overall cybersecurity program. This role will be full time with a duration of 3 months with a possibility to extend it depending on the agency's needs.

Key Responsibilities/Tasks

The Technical Specialist will primarily be responsible for tasks related to Governance, Risk, and Compliance (GRC), including:

• Identifying relevant Suffolk County Cybersecurity Laws and Regulations.
• Creating and updating Cybersecurity Policy and Standards based on the NIST framework.
• Defining a Risk-Based Compliance Audit process against established Cybersecurity Policies and Standards.
• Establishing processes for Cybersecurity Risk Tracking, Risk Mitigation, and Risk exception.
• Working toward the completion of overall objectives such as GRC Tool Implementation, Staff Augmentation, and Policy Development.

Minimum Qualifications

• Bachelor's Degree in Computer Science, or a combination of other education and/or experience that can be substituted.
• 10 years of enterprise experience.
• Demonstrated experience in the design and implementation of specialized solutions, particularly security or data center technologies.
  

Important Notice:

This role is part of a proposal for the Suffolk County's Department of Information Technology (DoIT). Hiring is contingent upon the selection of the consultant. Selected candidates will be included in the proposal and must authorize the use of their resume for submission.