USNH Okinawa

Security Engineer

• Lead Cybersecurity Governance, Risk, and Compliance functions for the University System of New Hampshire
• Coordinate use of risk management frameworks such as NIST CSF to assess security posture
• Support compliance with CMMC, FERPA, GLBA, HIPAA, and PCI DSS
• Prepare quantitative risk and compliance measures for the CISO and CIO
• Oversee cybersecurity policy and standards drafting, review, publication, and annual maintenance cycles
• Coordinate cybersecurity policy and standard exception processes and maintain exception records
• Oversee third-party vendor security assessment and review programs
• Coordinate contracted risk assessments, including scheduling, communication, and recordkeeping
• Perform internal risk assessments and risk analysis of USNH systems and services
• Assist with risk register management and periodic risk metrics reporting
• Develop information handling standards and procedures for regulated information
• Assist with disaster recovery and business continuity plan development, implementation, and testing
• Develop and deliver cybersecurity awareness and training programs
• Administer phishing awareness activities, simulations, deployment, measurement, and reporting
• Support cybersecurity incident response recordkeeping, tracking, reporting, after-action reviews, training, drills, and testing
• Support other information security and information technology projects as assigned

Lead Cybersecurity GRC, DB/BC Analyst