Cyber Communications Coordinator

Cyber Communications Coordinator

Location: Remote, preference will be given to candidates located in Columbus, OH.

Compensation: $75,000 - $95,000 per year, depending on experience and qualifications.

Employment Type: Full-Time

What you can expect as the Cyber Communications Coordinator at Fortress…

The Cyber Communications Coordinator serves as a subject matter expert across the full lifecycle of vulnerability management for a major client engagement, independently executing vulnerability monitoring, triage, applicability assessment, remediation coordination, validation, and operational communications with minimal oversight. This role owns recurring program outputs end-to-end, from technical analysis through executive-facing deliverables, and exercises sound judgment to prioritize work, resolve ambiguity, and escalate appropriately.

The Cyber Communications Coordinator is expected to operate efficiently across competing priorities while elevating the performance of junior operators through mentoring and modeling operational discipline. It is a compelling opportunity for a seasoned cybersecurity professional looking to take full ownership of a high-visibility client program, drive meaningful process improvements, and contribute directly to program consistency, audit-readiness, and overall effectiveness.

Responsibilities Include

• Serve as a subject matter expert (SME) on the client''s vulnerability management process, supporting platform, and operational workflows; act as primary liaison between business units and the vulnerability management team and as a point of contact for program staff on questions, troubleshooting, and platform support.
• Independently administer the end-to-end execution of vulnerability management processes in alignment with established workflows, timelines, and program standards, exercising sound judgment to prioritize work, resolve ambiguity, and escalate appropriately without routine senior oversight.
• Independently monitor security advisories, vendor bulletins, threat feeds, and open-source intelligence sources to identify emerging vulnerabilities and CVE activity; make triage and prioritization decisions based on operational risk and business impact.
• Analyze vulnerability scanner output, conduct asset ownership identification using CMDB and enterprise asset management data, assess applicability across assigned business units or asset groups, and coordinate manual source evaluations for assets and applications not covered by automated scanning.
• Own remediation activity end-to-end within enterprise ITSM platforms, including ticket creation, tracking cadence, follow-up, escalation workflows, evidence validation, closure, and post-remediation monitoring; exercise discretion in determining corrective actions when inconsistencies are identified.
• Maintain and improve data quality across vulnerability and asset management systems, including verifying and updating client asset inventories and resolving cross-platform inconsistencies.
• Independently produce coordinated-response session readouts, leadership readouts, business-unit communications, escalation messaging, remediation updates, executive-facing PowerPoint presentations, and post-validation summaries within established turnaround expectations, including same-business-day delivery for high-severity vulnerability events.
• Own recurring reporting cadences end-to-end, including weekly remediation tracker updates, monthly leadership reports, quarterly review materials, dashboards, and presentation materials that communicate operational status, remediation progress, and risk themes clearly and concisely to senior stakeholders.
• Exercise editorial judgment independently to refine communications for clarity, tone, and audience alignment; distinguish editorial refinement from substantive technical modification, document approvals appropriately, and produce audit-defensible documentation throughout the vulnerability management lifecycle.
• Develop, maintain, and continuously improve templates, process documentation, reporting workflows, communication structures, and operational guidance materials; drive process improvement initiatives that enhance program consistency, efficiency, visibility, and compliance.
• Provide guidance and mentoring to junior team members and Cyber Operators to ensure process adherence, operational excellence, and consistent quality; serve as an escalation point for complex or non-standard issues and lead resolution efforts in partnership with internal team leads and client stakeholders.
• Collaborate with internal team leads and client vulnerability management program staff to ensure program goals, metrics, and service expectations are met; participate in and contribute substantively to program and leadership meetings.
• Leverage AI tools responsibly to enhance the quality, efficiency, and insight of operational work while maintaining human validation, data-handling compliance, and accountability for all final outputs.
• Manage competing priorities effectively in a structured, high-accountability operational environment.
• Other duties as assigned.

Minimum Qualifications

• 3-5 years of experience in cybersecurity, vulnerability management, IT operations, SOC operations, or a related field, with demonstrated ability to operate independently in a structured, high-accountability environment.
• Proficient knowledge of cybersecurity frameworks, vulnerability management tools, and best practices, including CVEs, CVSS scoring, and remediation workflows.
• Hands-on experience using enterprise vulnerability scanning platforms (Tenable, Qualys, Rapid7, or similar) and enterprise ITSM platforms (ServiceNow, Jira, or similar).
• Demonstrated ability to exercise independent judgment in operational decision-making, including triage, prioritization, escalation, and corrective action management.
• Demonstrated ability to manage competing priorities and multiple operational deliverables simultaneously with minimal oversight.
• Excellent written and verbal communication skills, including the ability to produce executive-facing presentations, leadership communications, and audit-defensible operational documentation.
• Demonstrated ability to deliver recurring operational reporting and written deliverables within established timelines, including same-business-day turnaround expectations for high-severity events.
• Advanced proficiency with Microsoft 365 tools, including Word, Excel, PowerPoint, Outlook, and SharePoint.
• Demonstrated ability to mentor and elevate junior team members through guidance, coaching, and modeling operational excellence.
• Ability to leverage AI tools and independently refine prompts to improve the quality, efficiency, and insight of operational work.

Preferred Skills

• Direct experience supporting enterprise vulnerability management operations in regulated industries such as utilities, energy, defense, healthcare, or financial services, including NERC-CIP environments or comparable regulatory frameworks.
• Experience with Power BI, Tableau, or similar reporting and dashboard tools.
• Experience with Confluence or similar knowledge-management and collaboration platforms.
• Experience supporting executive reporting, operational leadership communications, or chief-of-staff functions.
• Basic scripting or automation experience (Python or similar).
• Cybersecurity-related certifications such as CompTIA Security+, CySA+, GSEC, GCIH, or equivalent.

Education

• Associate's degree or equivalent professional work experience required.
• Bachelor''s degree preferred.

Employee Benefits:

• Remote and Hybrid working environment
• Competitive pay structure
• Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
• Company paid life, short- and long-term disability insurance
• Employee Assistance Program
• 401(k) match
• Flexible Paid Time Off
• Parental Leave

Employment Perks:

• We provide each employee with professional growth opportunities through succession planning, up-skilling, and certifications
• Tuition and certification reimbursement
• Employee Referral Programs
• Company Sponsored Events

Fortress is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. Fortress Information Security takes part in the E-Verify process for all new hires.

For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will have to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.