обновлено 9 дней назад
Sr. Information Security Technical Lead (Cybersecurity)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Sr. Information Security Technical Lead (Cybersecurity): Managing FedRAMP operations, compliance programs, lifecycle activities, security assessments, and incident management for government SaaS offerings with an accent on FedRAMP, GRC, cloud security, and NIST-based controls. Focus on automating continuous monitoring, maintaining SSP and POA&M documentation, coordinating auditors, and handling complex security incidents across international teams.
Location: Manila, Philippines
Company
develops cybersecurity products and government SaaS offerings, including VisionOne and CloudOne.
What you will do
- Lead Philippine technical operations for FedRAMP security cases and coordinate with FedRAMP Operations members in the Americas region.
- Manage FedRAMP compliance programs, lifecycle activities, authorizations, continuous monitoring, and reauthorizations.
- Integrate FedRAMP requirements across IT, security, development, and technology teams.
- Develop System Security Plans, policies, procedures, controls, POA&M automation, and compliance reports.
- Conduct security assessments and audits, monitor regulatory changes, and coordinate with external auditors and assessors.
- Guide internal teams on FedRAMP requirements, risk assessments, incident response, and compliance remediation.
Requirements
- 3+ years of information security or network administration experience in an enterprise-level SOC.
- At least 3 years of security compliance or GRC experience, preferably supporting U.S. public sector authorizations.
- Experience with firewalls, Windows Servers and PCs, network security, security architecture, and wired and wireless networks.
- Knowledge of Azure GovCloud, Sentinel, Nessus, HCL AppScan, JIRA, SIEM, IDS/IPS, EDR, and network monitoring tools.
- Strong understanding of FedRAMP, CMMC, NIST 800-53, NIST RMF, FISMA, cloud services, and risk assessment procedures.
- Proficiency in Windows, macOS, and Linux, with strong analytical, communication, and project management skills; availability for international video conferences and non-regular-hours incident response.
Nice to have
- CISSP, GCIH, GCFA, CEH, or similar industry certification.
- Experience with third-party security risk assessments, penetration testing, threat hunting, computer forensics, incident response, or security audits.
- Advanced FedRAMP expertise and the ability to work independently with minimal supervision.
Culture & Benefits
- Mission focused on improving the safety of digital information exchange.
- Collaboration with internal teams, auditors, customers, regulatory bodies, and international security operations teams.
- Exposure to government SaaS products and FIPS-compliant software releases.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →