Information System Security Officer – Federal Programs

🕒 6 dias atrás

🌵 Arizona, Colorado, +24 estados a mais – Remoto

🌵 Arizona – Remote ⛰️ Colorado – Remote 🐊 Florida – Remote 🌽 Illinois – Remote 🌪️ Kansas – Remote 🐎 Kentucky – Remote 🦬 Montana – Remote 🌾 Nebraska – Remote 🎰 Nevada – Remote 🗽 New York – Remote 🌲 North Carolina – Remote 🏈 Ohio – Remote 🌪️ Oklahoma – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🚗 Michigan – Remote 🎸 Mississippi – Remote 🏰 Missouri – Remote 🔔 Pennsylvania – Remote 🌴 South Carolina – Remote 🎸 Tennessee – Remote 🤠 Texas – Remote ⚔️ Virginia – Remote ☕ Washington – Remote ⛰️ West Virginia – Remote 🧀 Wisconsin – Remote

💵 $100.000 - $140.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 1%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Commence

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

🏥 Saúde

🏛️ Governo

🤖 Inteligência Artificial

Healthcare • Government • Artificial Intelligence

A Commence é uma empresa de dados e tecnologia de saúde que oferece soluções centradas em dados para tornar os dados de saúde mais acessíveis, descobertos e interoperáveis. A empresa combina expertise clínica com transformação de dados impulsionada por IA e uma plataforma tecnológica para tratar de fraudes, desperdícios e abusos, resolução de disputas independentes, revisões por pares e independentes, melhoria de qualidade e defesa do paciente. A Commence atende agências federais de saúde (CMS, VA, Agência de Saúde de Defesa), programas governamentais estaduais e locais e clientes de saúde comerciais, focando em melhorar resultados, precisão e integridade do programa.

Descrição

• Serve as designated ISSO for assigned federal systems and primary system-level security liaison • Carry out CIO and ISSM priorities and escalate program-level issues, risk acceptances, and exceptions • Coordinate with Project Managers to incorporate security and authorization milestones into project plans • Assess security impacts of system changes before release • Run the NIST Risk Management Framework Security Assessment and Authorization lifecycle from FIPS 199 categorization through authorization, ongoing authorization, and reauthorization • Author and maintain SSPs, risk assessments, Privacy Impact Assessments, contingency plans, incident response plans, configuration management plans, and interconnection agreements • Maintain POA&Ms in agency GRC platforms • Review vulnerability and configuration scans against DISA STIGs, CIS benchmarks, and agency baselines • Assign and track remediation with Cybersecurity Engineers and IT Operations • Prepare ongoing-authorization and continuous-monitoring reports • Lead preparation for CMS, VA, DoD, and IRS agency assessments • Coordinate evidence collection and findings responses with Compliance Analysts • Maintain compliance with agency-specific federal security, privacy, and CUI requirements • Respond to security and privacy incidents affecting federal data and coordinate agency notifications • Complete system-level contract security deliverables • Manage federal personnel security tasks, including Public Trust, e-QIP processing, training, rules of behavior, and access attestations • Support internal audits and control assessments against SOC 2, NIST, HIPAA, HITRUST, and ISO/IEC 27001 frameworks • Provide system-specific input for external audits and security questionnaires

🎯 Requisitos

• 5+ years of information assurance or cybersecurity experience • 3+ years as an ISSO or A&A lead for federal information systems • Bachelor’s degree in a related field or equivalent experience • Personally taken at least one federal system through an initial ATO or reauthorization under NIST SP 800-37/800-53 • SSP authorship and POA&M management in agency-specific GRC platforms • Working knowledge of at least two: CMS ARS/IS2P2, VA 6500, DoD RMF and NIST SP 800-171/CMMC, IRS Publication 1075 & 4812, DHS 4300A • Experience with FedRAMP and HIPAA is a plus • Comfortable reading vulnerability and configuration scan output from Tenable/Nessus, Defender, AWS Inspector, or SCAP/STIG Viewer • Familiarity with AWS and Microsoft 365/Azure • Clear, precise writing ability and capacity to manage multiple systems and deadlines • CompTIA Security+ or higher DoD 8140-qualifying certification required • CISSP, CGRC, CISA, or CCSP preferred • U.S. citizenship required • Ability to obtain and maintain federal Public Trust suitability required • Ability to sit, read, work on a computer, and watch a computer screen for extended periods • Ability to occasionally stand, walk, use hands and fingers, kneel, or crouch

🏖️ Benefícios

• Remote work arrangement • Estimated 15–25% travel • Reasonable accommodations for individuals with disabilities • On-call coverage participation for security incidents • Equal employment opportunity and nondiscrimination • Remote candidates accepted in specified states

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo