The DHHS Privacy & Security Office is launching a
large-scale cybersecurity initiative involving technical security risk assessments
and penetration testing across 100 counties. This initiative covers county
IT infrastructure including servers, desktops, networks, firewalls, user access
provisioning, MFA, VPNs, security hardening procedures, vulnerability
management, and patch management processes. The Technical Security Risk Assessment & Penetration
Testing Lead Consultant will be responsible for designing and conducting
technical security assessments, performing penetration testing activities,
creating standardized methodologies and templates, and managing the assessment
team’s assignments and project timelines. The consultant will also provide
clear, non-technical communication of complex security topics to business
leaders, CMS and stakeholders.
Experience in cybersecurity risk assessments and penetration testing. (7 Years)
Lead and perform technical security risk assessments on county IT environments (servers, desktops, networks, firewalls, IAM, MFA, VPNs, patching pro (5 Years)
Conduct internal/external penetration testing, vulnerability identification, and exploit validation (7 Years)
Develop a repeatable assessment methodology, templates, testing procedures, and reporting formats for use across 100 counties. (5 Years)
Manage and coordinate assessment team workloads, assignments, schedules, and deliverables. (7 Years)
Create and maintain project plans, timelines, and progress reports. (7 Years)
Familiarity with NIST, CIS Controls, ISO 27001, and related frameworks. ________________________________________ (3 Years)
