Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$143к-175к/год
$140к$150кмедиана$180к
По похожим ролям (49) ~ $150к/год
На СНГ рынке: $6.7к/мес ($3.6к - $12к)
83
Хорошая вакансия
развернуть
Обязанности четко очерчены, а роль предполагает самостоятельное ведение сложных проверок безопасности. При этом работа в госконтрактинге может зависеть от требований и процессов заказчика.
?Работа на заказчика
Четкие обязанности
Современные системы
?Требуется допуск
Поддержка обучения
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Information Systems Security Officer (Cybersecurity): Managing full-lifecycle RMF assessment and authorization activities across multiple concurrent systems, with an accent on NIST compliance, emerging AI/ML platforms, and complex distributed architectures. Focus on developing RMF artifacts, validating vulnerability remediation, adapting security controls to novel systems, and mentoring junior ISSO staff.
Location: US-Remote; based in Washington, DC and eligible for 100% remote work
Salary: $143,230–$175,000 annually
Company
hirify.global delivers IT services and solutions that help government agencies improve their operations and services.
What you will do
Execute all phases of the NIST SP 800-37 RMF lifecycle across multiple concurrent systems, network environments, and assessment pipelines.
Develop and maintain SSPs, SARs, SAPs, POA&Ms, contingency and incident response plans, risk assessments, interconnection agreements, and BOE packages.
Assess emerging technology systems, including AI/ML platforms and microservices-based architectures, and adapt NIST SP 800-53 Rev. 5 baselines where needed.
Collect evidence, maintain control traceability, review Tenable Security Center vulnerability results, and manage remediation through closure.
Provide security reporting, dashboards, metrics, and status updates while coordinating with system owners, stakeholders, and program leadership.
Mentor junior ISSO staff and develop SOPs, work instructions, and process documentation.
Requirements
Bachelor’s degree with 12+ years of information system security experience, or commensurate experience.
8–10+ years in an ISSO or cybersecurity compliance role, including direct responsibility as ISSO of record.
Experience conducting RMF assessments across multiple network environments and managing multiple concurrent A&A assessments.
Experience developing complete RMF artifact packages, including SSPs, SARs, POA&Ms, RARs, and supporting BOE documentation.
Experience with microservices-based or distributed system architectures and component-level security assessments.
Proficiency with GRC platforms such as JCAM/CSAM, Xacta, or equivalent.
Active CompTIA Security+ CE certification.
DoD 8570.01-M / DoD 8140 compliance at IAM Level II or III, such as CISSP, CISM, CASP+, or equivalent.
Ability to maintain a Public Trust clearance is required.
Culture & Benefits
Collaborative environment focused on meaningful government IT work.
Flexible work environment.
Employee Assistance Program, corporate discounts, pet insurance, and referral bonus program.
Learning and development platform, including certification preparation content, plus training, education, and certification assistance for full-time employees.
Internal mobility opportunities.
Hiring process
Virtual video interview with the hiring manager and/or team; the camera must be on and a valid photo ID must be presented during each interview.
Enhanced biometric ID verification and background screening covering criminal history, highest education level, and employment history for the past seven years.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →