o Develop, implement, and maintain cybersecurity policies, procedures, and standards in accordance with industry best practices and regulatory requirements (e.g., NIST 800-171 Rev 3, ISO 27001,GDPR, UK Cyber Essentials, etc.).

o Ensure compliance with relevant regulations and frameworks.

o Conduct regular reviews and updates of security policies.

o Design, implement, and manage DLP solutions to protect sensitive data.

o Monitor DLP alerts and investigate potential data breaches.

o Fine-tune DLP policies to minimize false positives and maximize effectiveness.

o Administer and maintain SharePoint environments across three tenants.

o Manage user access, permissions, and security settings.

o Implement and enforce security policies within SharePoint.

o Troubleshoot SharePoint related security issues.

o Assist in the planning, implementation, and configuration of a new GCC High tenant.

o Ensure security best practices are followed during the migration process.

o Collaborate with other teams to integrate GCC High with existing systems.

o Implement data tagging strategies to classify and categorize sensitive information in alignment with both best practices and compliance programs.

o Plan and execute data migration projects, ensuring data integrity and security.

o Automate data tagging and migration processes where possible.

o Automate process and workflows for secure sharing with only vetted and approved users.

o Monitor security alerts and vulnerability scans.

o Analyze vulnerability reports and prioritize remediation efforts.

o Implement timely patches and fixes to address identified weaknesses.

o Track and report on vulnerability remediation progress.

o Respond to security incidents and breaches.

o Contribute to the development and delivery of security awareness training programs.

o Educate employees on best practices for cybersecurity.

o Collaborate with other IT teams and business units to ensure security is integrated into all aspects of the organization.

o Communicate effectively with technical and non-technical stakeholders.

o Provide regular updates on security status and initiatives.

o Perform other work as directed by Management.

• Candidates must meet Authorized US Persons criteria under ITAR – candidates must be either US Citizen, Lawful Permanent Resident or other certain protected authorized asylees. Additionally, qualified candidates may not be otherwise disbarred from having access to ITAR controlled information.
• Current US Government Secret Clearance (or higher) is required.
• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Proven experience in cybersecurity engineering, preferably in a regulated industry.
• Strong understanding of cybersecurity frameworks and regulations (e.g., NIST, ISO 27001, HIPAA, etc.) and GRC tools.
• Expertise in data loss prevention (DLP) technologies.
• Extensive experience in SharePoint administration, including multi-tenant environments.
• Hands-on experience with Microsoft 365 security features.
• Experience with GCC High implementation and management is highly desirable.
• Knowledge of data tagging and classification techniques.
• Relevant degrees, skilled trades certifications or licenses preferred
• 1 to 3 years of relevant experience.
• Experience with DoD acquisition process, and DoD contracting requirements preferred
• Demonstrated ability to build and maintain relationships with government officials, defense organizations, and industry stakeholders
• Excellent communication, negotiation, and presentation skills
• Self-starter with strong analytical and problem-solving skills
• Ability to work independently and as part of a team in a fast-paced and dynamic environment
• Willingness to travel domestically
• ISO 9001:2015 training preferred
• Proficient in the use of Microsoft Office suite (Word, Excel, Outlook, PowerPoint, and Project)

• Relevant certifications (e.g., CISSP, CISM, Security+, Microsoft certifications).
• Experience with scripting languages (e.g., PowerShell, Python).
• Knowledge of cloud security best practices.
• Experience with security information and event management (SIEM) systems.

Physical Demands and Abilities

• Ability to walk, stand, use computers, lift or exert upwards of 25lbs occasionally, 10lbs frequently.
• Regularly spend long hours sitting and using office equipment and computers
• Regularly move from sitting to standing positions effortlessly
• Occasional travel

This job description is not intended to be all-inclusive, and employees will also perform other reasonably related business duties as assigned by immediate supervisor and other management as required.

Global Ordnance reserves the right to revise or change job duties and descriptions as the need arises. This job description does not constitute a written or implied contract of employment. As all employment with Global Ordnance LLC is At-Will and no part of this job description constitutes any promise of continued employment or employment contract.

Global Ordnance LLC (GlobalOrdnance.com & Global-Ordnance.com) is a force multiplier within the commercial and defense military industries supporting a wide array of equipment, ammunition and firearms. As a Veteran Owned Small Business, Global Ordnance LLC strives to provide excellence to our customers with unparalleled integrity of values and the loyalty expected. Global Ordnance LLC has spent years building relationships with global manufacturers and distributors of ammunition, firearms and equipment for our military and law enforcement contracts. These relationships along with Global Ordnance's understanding of customer needs within the defense industry has served as our natural foundation in the civilian marketplace. Thus, expanding into the commercial sale of ammunition, firearms, and complimentary equipment to the savants of the shooting industry or the novice hobbyist.