Information Security Officer

🕒 il y a 21 jours

🇺🇸 États-Unis – Télétravail

💵 $112 800 - $160 000 / an

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 3%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

eSimplicity

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2016

💼 Conseil

🏥 Santé

⚕️ Assurance santé

Consulting • Healthcare • Healthcare Insurance

eSimplicity est une entreprise composée de designers, d'ingénieurs et de stratèges dédiés à simplifier la complexité pour créer des produits et services primés. L'entreprise se concentre sur l'amélioration de l'expérience client, l'amélioration de la santé et de la vie de millions de personnes, et la protection des États-Unis. eSimplicity excelle dans les technologies de l'information pour la santé, en fournissant des solutions qui améliorent la couverture et l'accès aux soins pour des millions de personnes, et en assurant une gestion efficace de l'identité pour les prestataires de soins. Ils exploitent la science des données, l'apprentissage automatique et l'intelligence artificielle dans diverses applications, allant des modernisations numériques dans les systèmes de santé à la gestion du spectre pour les télécommunications dans les agences gouvernementales telles que l'Armée de l'Air et la Marine. eSimplicity s'engage dans sa mission en innovant et en s'adaptant continuellement pour avoir un impact sur les technologies de l'information fédérales et le conseil.

Description

• Serve as a senior security advisor to CMS ISSOs, product owners, engineers, infrastructure teams, and program leadership • Interpret FISMA, NIST RMF, NIST SP 800-53, CMS ARS, and agency security requirements and translate them into technical and operational actions • Develop, review, and maintain detailed security control implementation statements and supporting evidence • Maintain ATO artifacts, including System Security Plans, Security Impact Analyses, POA&Ms, risk assessments, contingency plans, incident response plans, and configuration management plans • Lead Security Impact Analyses for system, application, infrastructure, cloud, data, and configuration changes • Support security assessments and audits by coordinating evidence collection, reviewing artifacts, responding to assessor inquiries, documenting gaps, and tracking corrective actions • Review vulnerability and compliance scan results, validate findings, assess risk, and coordinate remediation • Develop and review vulnerability documentation, remediation plans, POA&Ms, false-positive determinations, and risk exception requests • Track vulnerability and compliance findings through assignment, remediation, mitigation, risk acceptance, retesting, and closure • Support continuous monitoring, access reviews, security data calls, compliance reporting, and security posture assessments • Identify control, evidence, and documentation gaps and recommend corrective actions or process improvements • Develop security metrics, dashboards, status reports, and risk summaries for government stakeholders and program leadership • Communicate security risks, decisions, dependencies, overdue actions, and remediation status • Mentor security team members and perform quality reviews of security deliverables

🎯 Exigences

• Minimum of 8+ years of progressive experience in information security, cybersecurity engineering, or system security roles • Bachelor's degree in computer science, Information Systems, Engineering, Business, or another related scientific or technical discipline • Experience supporting federal systems subject to FISMA and the NIST Risk Management Framework • Experience applying NIST SP 800-53 security and privacy controls and CMS ARS or comparable federal security requirements • Experience developing, reviewing, and maintaining system-specific security control implementation statements and supporting evidence • Experience supporting ATO activities and maintaining System Security Plans, Security Impact Analyses, POA&Ms, risk assessments, contingency plans, incident response plans, configuration management plans, and related security artifacts • Experience supporting security assessments and audits, including evidence collection, assessor responses, gap identification, corrective action planning, remediation tracking, and closure validation • Experience managing vulnerability and compliance findings through validation, assignment, remediation, mitigation, risk acceptance, retesting, and closure • Experience with vulnerability and compliance tools such as Tenable, Snyk, AWS Security Hub, AWS Inspector, or comparable platforms • Ability to prepare technically supported risk exception requests and vulnerability documentation • Ability to develop accurate, audit-ready documentation and communicate security requirements, risks, findings, and remediation activities to technical and non-technical stakeholders • Ability to manage concurrent assignments, meet deadlines, maintain accurate status reporting, and escalate risks or blockers • Ability to obtain and maintain a Public Trust clearance • Must have resided in the United States for at least 3 of the last 5 years • Direct CMS systems, CMS security programs, or CMS ATO experience desired • Advanced CMS ARS 5.0 or later experience desired • AWS cloud security experience desired • Familiarity with DevSecOps, CI/CD pipelines, source-code scanning, software composition analysis, container scanning, and security release reviews desired • Experience using Jira, Confluence, and ServiceNow desired • Current certification such as CISSP, CISM, CISA, CRISC, CAP/CGRC, CCSP, or equivalent security or audit certification desired

🏖️ Avantages

• Medical coverage • Dental coverage • Vision coverage • 401(k) retirement benefits • Paid time off • Paid holidays • Life insurance • Disability insurance • Wellness and employee support programs • Remote work environment • Occasional travel for training and project meetings, estimated at less than 5% per year