Cybersecurity Specialist

Job Title: Cybersecurity Specialist
Primary Location: Northbrook, IL - Hybrid, 3 Days in Office
Position Type: Contract-to-Hire - W2 Contract to Start

Overview
TalentFish is casting a line for a Cybersecurity Specialist. This is a hybrid contract-to-hire role in Northbrook, IL, with onsite work preferred 3 days per week. This position exists to support cybersecurity and information risk assessments across new and existing technologies, business initiatives, and third-party providers, helping stakeholders make informed, risk-based decisions. The contract is anticipated to begin 12/1/2026, with conversion to a full-time role. Standard schedule is 8:00 AM to 5:00 PM, 40 hours per week. Laptop, monitors, and headset will be provided.

What You Bring to the Role. (Ideal Experience)

• Bachelor's or master's degree in Business, Computer Science, Cybersecurity, Information Security, or a related field
• 2+ years of experience in cybersecurity, information security, technology risk, or a related risk management role
• 2+ years managing risk and compliance matters or supporting applications, managed service providers, projects, systems, or third-party relationships requiring risk identification, assessment, remediation, and monitoring
• Hands-on experience using ServiceNow to perform and manage Vendor Risk Assessments
• Experience evaluating complex third-party risks through vendor risk management, information security, regulatory compliance, or audit activities
• Experience with cybersecurity, risk, and compliance frameworks such as ISO/IEC 27001, COBIT, NIST Cybersecurity Framework, NIST SP 800-series, and FAIR
• Experience supporting or conducting cybersecurity risk assessments and documenting risk decisions
• Strong understanding of operational, cybersecurity, information security, and technology risks, and the components of risk (assets, threats, vulnerabilities, controls, business impact)
• Ability to evaluate control design and implementation and determine the effect on inherent and residual risk
• Ability to translate technical cybersecurity concerns into business risk and communicate findings clearly and objectively to business and risk owners
• Strong business acumen, analytical, critical-thinking, and problem-solving skills, with the ability to reach defensible, evidence-based risk conclusions
• Excellent prioritization and organizational skills, with the ability to manage multiple priorities across functions and stakeholders
• Strong written and verbal communication skills
• Preferred, not required: CISSP, CISM, or CISA

What You'll Do. (Skills Used in this Position)

• Support cybersecurity and information risk assessments for new and existing technologies, services, business initiatives, and third-party providers
• Identify and document risk scenarios, including assets, threats, vulnerabilities, controls, likelihood, and potential business impact
• Develop clear risk statements and distinguish between risks, issues/findings, and control deficiencies within the Risk Register
• Communicate findings to risk owners, business stakeholders, information governance, and cybersecurity teams
• Provide risk-based guidance on risk acceptance, mitigation, transfer, or avoidance, and recommend appropriate controls and treatment activities
• Identify opportunities to improve risk posture and help develop remediation and mitigation strategies
• Assess residual risk after mitigating or compensating controls are implemented
• Track risks, issues, remediation activities, and risk events through closure
• Support the full third-party/vendor risk management lifecycle, including assessments, due diligence, control validation, ongoing monitoring, and remediation tracking
• Support responses to external customer cybersecurity and information security questionnaires
• Apply legal, regulatory, contractual, and industry requirements when evaluating cybersecurity and third-party risks
• Support risk reporting and documentation that gives visibility into material risks, issues, and remediation activities

Compensation Information
The expected salary range for this position is $40 - $58 per hour, depending on experience and qualifications. This role also qualifies for comprehensive benefits such as health insurance and paid time off. TalentFish is committed to pay transparency and equal opportunity. The salary range provided is in compliance with applicable state and federal regulations.

This role requires authorization to work in the U.S. without current or future visa sponsorship.

All offers are contingent upon the completion of a background check, which may include but is not limited to reference checks, education verification, employment verification, drug testing, criminal records checks, and any required certifications or compliance requirements based on the end client's background check policies and applicable laws.

TalentFish is an employee-owned company pioneering a new realm in talent acquisition. We are redefining IT staffing by evolving AI, video screening, and our unique platform. TalentFish focuses on providing the best employee, consultant, and client experience possible.
At TalentFish we are an Equal Opportunity Employer; we embrace and encourage diversity!