Description

You will manage security compliance and continuous monitoring within cloud environments. You will own the release pipeline for FedRAMP reporting, including risk assessments, POA&Ms, and remediation plans.

Responsibilities

• Implement security controls within FedRAMP, FISMA, and SOX compliant environments.
• Manage security architectures and standards following NIST guidelines.
• Influence stakeholder groups to forge consensus on security requirements across different hierarchies.
• Drive project execution and management for information security compliance initiatives.
• Manage risk assessments and Plan of Action and Milestones (POA&M).

Required Skills

• 7+ years of information security experience, specifically in cloud security and continuous monitoring.
• Deep knowledge of NIST frameworks: SP 800-30 rev 1, 800-37 rev 1 or 2, 800-53 rev 5, 800-60 Vol 1 rev 1 & 2, and 800-171 rev 3.
• At least one advanced certification such as CISSP, CCSP, or CRISC.
• Experience implementing systems in FedRAMP, FISMA, and SOX environments.
• Bachelor’s degree in information security, a related field, or equivalent experience.
• Strong project management capabilities and execution skills.

Preferred Skills

• Experience with government compliance, including OMB requirements, RMF, and CSF.
• Advanced knowledge of cloud architectures, technologies, and services.
• FedRAMP certification.

Key Skills

Education

Bachelor's Degree