Information Systems Security Officer I (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Information Systems Security Officer I (Cybersecurity): Managing security posture and compliance for federal healthcare systems with an accent on NIST 800-53 standards and CFACTS governance. Focus on proactive risk advising, audit defense, and vulnerability management within a cloud-native AWS environment.
Location: Must be based in the United States
Salary: $111,800–$134,200 per year
Company
is a mission-driven digital services company focused on pioneering innovative technology solutions to improve public health outcomes.
What you will do
- Proactively identify system changes and document them in Security Impact Analyses (SIA) to maintain Authority to Operate (ATO).
- Serve as the source of truth for security posture in CFACTS, managing control implementation and evidence.
- Lead audit defense efforts by gathering logs, screenshots, and documentation for CMS auditors.
- Attend sprint ceremonies to advise developers on security standards and prevent rework.
- Track security weaknesses through the POA&M lifecycle to ensure compliance with patching windows.
- Review and maintain program documentation like Contingency and Incident Response Plans per FISMA requirements.
Requirements
- US Citizenship or Green Card holder (no sponsorship provided).
- US Residency for at least the past 3 years.
- Ability to successfully complete a US Government background investigation for Public Trust.
- At least 4 years of experience establishing security controls.
- Direct, hands-on experience with CFACTS (CMS-specific).
- Proven ability to author SIA, SSP, and PIA documents under NIST 800-53 Rev 5 and CMS ARS 5.0.
- Experience with vulnerability management tools like Tenable, Nessus, or WebInspect.
Culture & Benefits
- Remote-first and remote-only culture.
- Four weeks of paid time off and 10 floating company holidays.
- Flexible work schedule with provided home office setup including a MacBook.
- Comprehensive insurance coverage including medical, dental, vision, life, and AD&D.
- 401K plan with 3% safe harbor contribution.
- Wellness resources and virtual care options.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →