Principal, Public Sector SecOps, GRC

🕒 Julho 29

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $160.000 - $170.000 / ano

⏰ Tempo Integral

🔴 Especialista

🛡️ Operações de Segurança (SOC)

👻 Score fantasma 3%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Consensus Cloud Solutions

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

🏥 Saúde

☁️ SaaS

🤖 Inteligência Artificial

💰 $225.000.000 Post-IPO Debt - Consensus Cloud Solutions em 2025-07

Healthcare • SaaS • Artificial Intelligence

A Consensus Cloud Solutions é uma empresa de capital aberto (NASDAQ: CCSI) que começou como uma organização de fax digital em nuvem há mais de 20 anos e se separou da J2 Global (Ziff Davis) em outubro de 2021. É descrita como líder global em tecnologia de fax digital em nuvem e oferece soluções que transformam documentos digitais não estruturados em dados estruturados no padrão avançado de saúde HL7/FHIR. A empresa utiliza Processamento de Linguagem Natural e IA para criar dados prontos para análise para profissionais de saúde, permitindo o manuseio seguro de documentos de saúde e a integração com padrões de dados de saúde. Ela foca na indústria da saúde, enfatizando o fax seguro em nuvem e a transformação de documentos em dados.

Descrição

• Serve as the central security and compliance leader for all public sector engagements • Lead the design, implementation, and oversight of a unified security framework that aligns with NIST 800-53 Rev. 5 controls, FedRAMP High authorizations, GovRAMP, CMMC, and emerging SLED requirements • Ensure timely threat mitigation, streamlined audit processes, and secure delivery of cloud services to government agencies • Compile and submit Monthly Continuous Monitoring (ConMon) reports, including vulnerability scans, POA&M trackers, and asset inventories • Oversee threat hunting and vulnerability remediation to ensure compliance with strict federal timelines • Escalate unremediated vulnerabilities and initiate Plan of Action and Milestones (POA&M) creation within 7 days of issue identification • Coordinate and lead Annual 3PAO Security Assessments, including penetration testing and red team exercises • Manage and maintain a compliant, hosted secure repository for storing, retrieving, and provisioning access to security packages and artifacts • Manage third parties performing public sector security functions and direct project management support for these programs • Serve as System Steward for the VA-F package in eMASS • Submit and maintain accurate documentation for marketplace listings • Oversee actionable incident response testing every 6 months • Manage background checks and reinvestigations for personnel requiring system access • Maintain current SaaS platform architecture diagrams and submit Security Change Requests (SCRs) • Contribute to non-FedRAMP commercial compliance frameworks • Provide security and compliance guidance to IT, engineering, and development teams • Identify, evaluate, and implement GRC and SecOps tools • Assist with responses to customer security assessments • Mentor junior staff or cross-functional team members • Support business continuity planning, disaster recovery documentation, and live operational exercises.

🎯 Requisitos

• Bachelor's degree in computer science, information technology, or cybersecurity. • Active Certified Information Systems Security Professional (CISSP) and Project Management Professional (PMP) certification. • Undergo a Public Trust Background Investigation with a favorable suitability determination. • 8+ years of experience in information security governance, risk, and compliance, with at least 5 years specifically supporting FedRAMP High, FISMA, NIST SP 800-53 rev 5, or RMF. • 5+ years in the ISSM or ISSO role managing the security package for federal government agencies high-impact systems. • 5+ years of experience managing or supporting security assessments with Third Party Assessment Organizations (3PAOs). • 3+ years of hands-on experience using GRC platforms (e.g., RSA Archer, ServiceNow GRC, OneTrust) and vulnerability management platforms (e.g., Tenable, Qualys, Rapid7). • 2+ years direct experience mapping controls and leading assessments for GovRAMP, CMMC (Level 2+), and StateRAMP/SLED requirements. • 2+ years of experience with identity and access management systems (e.g., Okta, Azure AD) for access control governance. • Demonstrated experience working within cloud environments such as AWS GovCloud or Azure Government, including cloud-native security controls. • Proficiency with AWS CLI, PowerShell and scripting automated compliance tasks in Windows and Linux systems tools, Nessus Pro, Burp Suite, Splunk, AWS IAM, Jira, FortiGate firewalls, eMASS, Box.com for Gov, and Okta for Gov Identity Provider. • Demonstrates strong analytical skills to assess complex security risks, interpret compliance requirements, and evaluate technical vulnerabilities. • Builds and refines repeatable, auditable processes for security governance, risk management, and compliance activities. • Communicates clearly and effectively with technical and non-technical stakeholders, including auditors, developers, and executive leadership. • Ability to implement continuous monitoring and assessment programs to identify and address security threats in real-time, maintaining a proactive SecOps stance.

🏖️ Benefícios

• Annual performance bonus • ESPP • Enhanced time off packages