Information Systems Security Manager (Classified Cybersecurity)
Контакты
180 000 - 260 000$
Формат работы
onsite
Тип работы
fulltime
Английский
b2
Страна
US
cybersecuritystartupgrcregulatory compliancesoftware securityrmfnist 800 53comsecclassified systems
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Выше среднего
$180к-260к/год
$140к$150кмедиана$170к
По похожим ролям (49) ~ $150к/год
На СНГ рынке: $4.1к/мес ($2.9к - $7.9к)
84
Хорошая вакансия
развернуть
У роли понятная зона ответственности и тесная связь с инженерной командой, но высокий темп стартапа и возможная работа по выходным могут повлиять на нагрузку.
Кликните для подробной информации
Работа по выходнымАктуальные практикиЭнергетика будущегоВыше рынка
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Information Systems Security Manager (Classified Cybersecurity): Building and operating GRC and RMF processes for classified information systems with an accent on regulatory compliance, security assessment, and engineering enablement. Focus on owning the RMF lifecycle, automating policy assessment and enforcement, coordinating audits with government partners, and implementing security controls across the software stack.
Location: Los Angeles, CA; ability to work extended hours and weekends as necessary.
Base salary: $180,000–$260,000 annually.
Company
hirify.global designs, builds, and operates uranium enrichment services in the United States to produce affordable nuclear fuel for advanced reactors and critical industries.
What you will do
Own the RMF lifecycle and ensure classified information systems remain demonstrably compliant with regulatory requirements.
Serve as the primary owner and representative of the information systems security program for internal and external stakeholders.
Interpret regulatory requirements, clarify compliance obligations, and unblock engineering teams while managing regulatory overhead risk.
Partner with software engineers to evaluate and build automated tools for security policy assessment, auditing, and enforcement at scale.
Plan and coordinate external audits and tests with government partners.
Build the GRC tool suite and integrate security requirements into the software stack and operational model.
Requirements
Evidence of exceptional ability through prior projects, a portfolio of work, completed products, or similar achievements.
Strong understanding of engineering fundamentals and the ability to make clear trade-study recommendations using first principles with partial information.
3+ years of experience managing cyber assurance for classified computer networks.
Ability to obtain and maintain eligibility for a DoE Q-level clearance.
Ability to work extended hours and weekends as necessary.
Nice to have
Experience operating in a NIST 800-53 environment.
Experience in a fast-paced engineering or highly technical environment and delivering under tight timelines or budget constraints.
Experience building an approved classified space from the ground up on ambitious timelines.
Expertise with the seven-step RMF process and its relationship to modern software development.
Experience implementing 10 CFR Part 810 export-control and U.S.-person access restrictions as technical controls on classified systems in coordination with the FSO.
Experience obtaining ATOs under DoD or DOE authorization boundaries.
Expertise with COMSEC procedures and practices.
Experience writing and delivering complex software systems in a highly regulated environment.
Culture & Benefits
Mission-driven work focused on affordable nuclear energy and uranium enrichment.
Culture of urgency, accountability, and transparency.
Full-time hires may be eligible for long-term incentives through stock options.
Medical, vision, and dental coverage are available.
Access to a 401(k) retirement plan.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →