Lead ISSO Manager

Stelle nicht auf LinkedIn

🕒 vor 8 Tagen

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

E-Verify Program

WebsiteLinkedInAlle Stellen

501 - 1000 Mitarbeiter

🏛️ Regierung

👥 HR Tech

📋 Compliance

Government • HR Tech • Compliance

Das E-Verify-Programm ist ein webbasiertes System zur Überprüfung der Beschäftigungsberechtigung, das vom US-Heimatschutzministerium betrieben wird. Es ermöglicht teilnehmenden US-Arbeitgebern, die Identität und Arbeitsgenehmigung neuer (und einiger bestehender) Mitarbeiter elektronisch zu bestätigen, indem die von den Mitarbeitern bereitgestellten I-9-Formulare mit Bundesdatenbanken verglichen werden. Das Programm umfasst Ressourcen für Arbeitgeber und Arbeitnehmer (myE-Verify), erweiterte Funktionen wie E-Verify+, Fotomatching, Führerscheinverifizierung, Berichtswerkzeuge, Compliance-Richtlinien für Bundesauftragnehmer, Schulungen/Webinare sowie Datenschutz- und Nutzungsrichtlinien. E-Verify ist ein offizieller Regierungsdienst, der sich auf die rechtmäßige Überprüfung der Beschäftigung und die Einhaltung von Einwanderungs- und Einstellungsverordnungen durch Arbeitgeber konzentriert.

Beschreibung

• Serve as the principal advisor to senior SSD leadership on all cybersecurity and compliance matters for an assigned portfolio of major applications, general support systems, and/or cloud environments (FISMA-based, FedRAMP, Guaranty Agency, and Partner systems, etc.) • Lead, mentor, and supervise the contractor team of ISSOs and junior security analysts • Oversee the full Risk Management Framework (RMF) lifecycle (NIST SP 800-37) for all assigned systems, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring • Develop, maintain, and enforce the organization’s System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action & Milestones (POA&M), Contingency Plans, Incident Response Plans, and Configuration Management Plans • Coordinate and manage independent Security Controls Assessments (SCA) performed by third-party assessors (3PAO) and internal red/white teams; review and approve final assessment reports and evidence artifacts • Track, validate, and drive remediation of all POA&Ms to closure within FSA and DOED established timelines; escalate overdue high/critical findings to executive leadership • Ensure 100% compliance with federal mandates including FISMA, Executive Order 14028, OMB M-22-09 (Zero Trust), CISA Binding Operational Directives (BODs), and NIST SP 800-53 Rev 5 baseline, inherited, and common controls where applicable • Review and approve all change requests, configuration changes, and new technology introductions from a security and compliance perspective • Act as the primary liaison with the FSA and ED Security Operations Center (FSA SOC and ED-SOC), CISA, auditors, GAO, and other oversight bodies during audits, penetration tests, and incident investigations • Prepare and deliver executive-level briefings, dashboards, and attestation letters (e.g., annual FISMA report, EO 14028 attestation, FedRAMP Significant Change Requests) • Manage the organization’s continuous diagnostics and mitigation (CDM) program integration, vulnerability management program, and endpoint detection & extended detection and response (EDR/XDR) operations • Develop and maintain security policies, standards, procedures, and guidelines; ensure flow-down to subcontractors and cloud service providers • Oversee secure software supply chain practices (SBOMs, NIST SSDF, EO 14028 §4 requirements) for all custom and COTS software in the portfolio

🎯 Anforderungen

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (Master’s preferred) • Minimum 10 years of progressive cybersecurity experience, with at least 5 years serving in an ISSO or senior security control assessor role on federal systems • Minimum 3 years of direct supervisory or team-lead experience • Must have at least an active Secret clearance • Active certification(s) (one or more required): CISSP (must be current), CISSP-ISSMP or CISM (highly desired), CAP or CGRC (Certified in Governance, Risk and Compliance), CCSP or CCSK (for cloud-heavy environments) • Demonstrated expert-level knowledge of NIST SP 800-53 Rev 5 (High baseline), 800-37 RMF, 800-137 Continuous Monitoring, FedRAMP and/or DoD RMF processes, Executive Order 14028 and CISA directives, Zero Trust Architecture (NIST 800-207, OMB M-22-09) • Experience obtaining and maintaining ATOs at appropriate FISMA or FedRAMP impact levels • Excellent written and verbal communication skills with proven ability to brief C-level executives and non-technical stakeholders • Must be a U.S. Citizen.

🏖️ Vorteile

• Certification incentive program • PTO • Floating federal holiday options • Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs] • Flex Spending Accounts [FSAs] • Full Dental Plans • Vision • ST/LT Disability • Life Insurance • 401k matched