• Oversee the design, implementation, and management of security controls, including firewalls, intrusion detection/prevention systems, and endpoint protection. • Lead incident response efforts, including investigation, containment, and recovery from security breaches or incidents. • Monitor and assess emerging threats, vulnerabilities, and industry trends to maintain a robust security posture. • Develop, implement, and enforce IT security policies, standards, and procedures. • Ensure compliance with relevant regulations and standards (e.g., GDPR, PCI-DSS, ISO 27001). • Coordinate audits and assessments to validate security controls and address gaps. • Conduct regular risk assessments and vulnerability scans to identify and prioritize security risks. • Develop and maintain a risk management framework to mitigate threats to data and systems. • Collaborate with legal, compliance, and business units to address risk-related issues. • Evaluate and implement advanced security technologies, such as AI-driven threat detection, zero-trust architecture, and cloud security solutions. • Stay abreast of emerging technologies and their implications for cybersecurity

Title: Subject Matter Expert – Nuclear Power Plant Cybersecurity Remote - SAN ANTONIO, TX Job Description: Job Description:Seeking a Subject Matter Expert (SME) with expertise in nuclear power plant (NPP) technology and associated cybersecurity requirements, programs, and applications. Requirements: - Demonstrated experience performing work related to the cybersecurity of Nuclear Power Plants (NPPs), including regulation, research, evaluation, or implementation of NPP cybersecurity programs. - Demonstrated knowledge of NPP systems and the application of cybersecurity programs across NPP environments. - Detailed knowledge of NRC cybersecurity regulations, guidance, and standards applicable to nuclear power plants. - Experience supporting cybersecurity assessments, risk evaluations, compliance activities, or security controls for digital assets and operational technologies within NPPs. - Strong understanding of industrial control systems (ICS), operational technology (OT), digital instrumentation and control (I&C), and critical infrastructure protection within nuclear environments. - Ability to support technical research, analysis, documentation, and stakeholder discussions related to nuclear cybersecurity initiatives. Preferred Qualifications: - Bachelor’s degree in Nuclear Engineering, Cybersecurity, Electrical Engineering, Computer Science, or related field. - Prior experience supporting NRC, DOE, utilities, national laboratories, or related nuclear industry programs. Place of Performance: 100% Remote

Role Description The IT Security Manager is responsible for developing, implementing, and maintaining the organization’s cybersecurity policies, procedures, and systems to safeguard sensitive data and ensure compliance with regulatory standards. They lead a team of security professionals, manage risk assessments, and respond to security incidents to protect the organization’s IT infrastructure. - Oversee the design, implementation, and management of security controls, including firewalls, intrusion detection/prevention systems, and endpoint protection. - Lead incident response efforts, including investigation, containment, and recovery from security breaches or incidents. - Monitor and assess emerging threats, vulnerabilities, and industry trends to maintain a robust security posture. - Develop, implement, and enforce IT security policies, standards, and procedures. - Ensure compliance with relevant regulations and standards (e.g., GDPR, PCI-DSS, ISO 27001). - Coordinate audits and assessments to validate security controls and address gaps. - Conduct regular risk assessments and vulnerability scans to identify and prioritize security risks. - Develop and maintain a risk management framework to mitigate threats to data and systems. - Collaborate with legal, compliance, and business units to address risk-related issues. - Evaluate and implement advanced security technologies, such as AI-driven threat detection, zero-trust architecture, and cloud security solutions. - Stay abreast of emerging technologies and their implications for cybersecurity. Qualifications - Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. - Current Certified Information Systems Security Professional certification. - 6+ years of experience in IT security, with at least 3 years in a leadership or managerial role. - Proactive approach to identifying and mitigating cyber risks. - Ability to balance security requirements with business agility. - Familiarity with modern IT environments, including cloud platforms (AWS, Azure, Google Cloud), and DevSecOps. - Strong knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001). - Expertise in network security, encryption, and endpoint protection. - Proficiency with security tools (e.g., SIEM, IDS/IPS, DLP). - Excellent leadership, communication, and problem-solving skills. - Ability to work under pressure and handle sensitive information discreetly. - Experience w/ Salesforce is a plus. - Excellent communication and interpersonal abilities, facilitating effective collaboration across various departments and levels of the organization. - Experience working in a remote environment, comfortable leading remote teams. - Proficiency in Microsoft Office Suite, data visualization tools, and project management software. - Knowledge of VA disability ratings and claims preferred. - Ability to navigate difficult interpersonal conversations and utilize multiple platforms for communication within departments and teams. Benefits - Comprehensive Benefits Package - Competitive salary: $125,000-$150,000 Salary Depending on Experience. - Health, dental, and vision insurance with Company-sponsored Life Insurance. - Retirement savings plan with company match. - Vacation time off, sick time off, and holidays. - Career Development Opportunities - Ongoing training and development programs. - Opportunities for advancement within the company. - Work-Life Balance - Flexible work schedules. - Remote first environment with companywide conferences annually. - Employee assistance program for personal and family well-being. - Perks and Rewards - Employee discounts on products and services through Insperity. - Recognition programs for outstanding performance. - Company-sponsored social events and activities. - Ability to travel twice per year, to Annual Company Conference and IT Team Onsite, as well as potential for additional Leadership meetings.

• Assess risks in systems, cloud environments, internal processes and new projects; • Conduct continuous security assessments of infrastructure and applications; • Propose and follow up on action plans to improve security maturity; • Ensure compliance with LGPD, ISO/IEC 27001 and other applicable frameworks; • Develop and maintain Information Security policies, standards and procedures; • Support business continuity and disaster recovery initiatives; • Prepare reports and provide evidence for audits and compliance assessments; • Support the implementation and evolution of security tools such as SIEM, WAF, IDS/IPS, EDR, DLP and vulnerability management solutions; • Establish monitoring, detection and incident response processes; • Coordinate security investigations and simulation exercises; • Ensure security best practices in cloud environments (AWS and OCI), including access management, encryption, backups and automations; • Collaborate with Engineering and DevOps teams to implement DevSecOps practices and security in CI/CD pipelines; • Define security and privacy-by-design standards for products and infrastructure; • Manage IAM-related controls, including MFA, SSO, RBAC and periodic access reviews; • Ensure traceability, segregation of duties and privileged access governance; • Support the adoption and governance of PAM/password vault solutions; • Participate in defining security requirements for SaaS/PaaS products; • Perform application vulnerability analysis using SAST, DAST and interpret pentest results; • Promote secure development practices and share references such as the OWASP Top 10 with technical teams; • Conduct security training and awareness initiatives; • Act as a technical authority for different areas of the company; • Define a security roadmap aligned with business strategy; • Support architecture decisions, risk prioritization and security investments; • Serve as the technical focal point for audits, RFPs and security questionnaires; • Support commercial, customer service and pre-sales teams in communicating the company’s security practices.