Security Specialist

• Act as the lead technical point of contact for external security assessments
• coordinate workshops, review findings, and translate technical recommendations into internal implementation plans
• Conduct deep-dive reviews of security scores and develop remediation strategies to address identified risks across all cloud workloads
• Review and refine Role-Based Access Control (RBAC) configurations across identity management platforms (Entra ID) to ensure strict alignment with least-privilege principles
• Assess and improve mobile device management (Intune) security configurations, including device compliance policies, attack surface reduction (ASR) controls, and conditional access integration
• Develop prioritized, practical roadmaps for security improvements and track the execution of action items in collaboration with internal IT teams
• Clearly document security gaps, proposed RBAC models, and governance controls for both technical teams and leadership

• Minimum 5 years of experience in dedicated Cybersecurity and Information Security roles
• Demonstrated hands-on experience with security posture management and endpoint security tools
• Strong working knowledge of identity management, cloud-based RBAC, and least-privilege design
• Cybersecurity certifications with a focus on cloud security (e.g., Azure or Microsoft 365 security) are highly desirable
• Proven experience responding to security audits or posture reviews and addressing recommended action items
• Expertise in designing device compliance policies, configuration profiles, and endpoint protection settings
• Strong ability to document findings and implementation approaches clearly for technical and non-technical audiences

Cybersecurity certifications with a focus on cloud security (e.g., Azure or Microsoft 365 security) are highly desirable

• Lead a critical security optimization project with clear, high-level objectives
• Serve as the Subject Matter Expert (SME) for enterprise-wide security posture improvements
• Deep involvement with advanced security tools, including Defender, Intune, and Entra ID
• Focused, short-term contract dedicated to specific architectural and governance outcomes