Overview
Information Technology Risk Manager Jobs in Tallahassee, FL at Capital Technology Alliance
Title: Information Technology Risk Manager
Company: Capital Technology Alliance
Location: Tallahassee, FL
About Capital Technology Alliance:
At Capital Technology Alliance, we believe changing the future of technology means valuing people. We are committed to building a collaborative, high-performing environment where professionals are empowered to deliver meaningful impact. Our teams work on challenging, often high-visibility initiatives that support mission-critical systems, enterprise modernization efforts, and data-driven decision-making.
CTA is proud to demonstrate a high renewal rate with our employees and contractors. We place a high value on expertise. That’s why CTA is committed to paying top rates in the industry and connecting you with positions and flexible engagement options that match your skills and professional goals.
Job Title: IT Risk and Compliance Director
Job Duties:
- Conduct comprehensive vulnerability assessments using industry-standard tools and methodologies.
- Perform penetration testing using a structured approach, progressing from passive to active techniques.
- Identify and analyze Indicators of Compromise (IOCs), unauthorized access attempts, and data exfiltration risks.
- Apply and interpret the Common Vulnerability Scoring System (CVSS) to prioritize risks.
- Conduct threat hunting activities to detect active or persistent threats within enterprise environments; and
- Provide incident response support, including containment, eradication, and recovery recommendations.
Required Qualifications:
- Demonstrated experience providing cybersecurity services for large, complex enterprise environments, preferably within government or criminal justice agencies.
- Proven track record delivering threat hunting, vulnerability assessments, penetration testing (internal and external), and incident response services.
- Experience supporting environments subject to Criminal Justice Information Services (CJIS) Security Policy requirements.
- Ability to provide advisory services, including cybersecurity strategy, governance, risk, and compliance (GRC), and remediation planning.
- Minimum five (5) or more years of hands-on cybersecurity experience in one or more of the following: threat hunting and threat intelligence, penetration testing and ethical hacking, vulnerability management, and Incident response and digital forensics; and
- Demonstrated experience operating in both offensive security roles (e.g., red team, penetration testing) and defensive security roles
Preferred Qualifications:
- Experience conducting red team and adversarial simulation exercises.
- Ability to support cybersecurity roadmap development and maturity assessments.
- Relevant industry certifications are preferred, such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), Global Information Assurance Certification (GIAC), Certified Information Security Manager (CISM), and Certified Information Systems Auditor (CISA); and
- Experience integrating with client Managed Service Providers (MSPs) and internal IT teams.
Education:
- A bachelor’s or master’s degree from an accredited college or university in Computer Science, Information Systems, or other related field or four (4) years of equivalent work experience is required. Relevant experience may be substituted for education on a year-for-year basis when applicable.
