SciTec

SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities. SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.RequirementsDUTIES: <ul> <li>Leading the development, maintenance, and evaluation Information System (IS) security documentation, including System Security Plans (SSPs), Continuity of Operations Plans (COOPs), and Standard Operating Procedures (SOPs).</li> <li>Conducting cybersecurity controls assessments in accordance with applicable regulatory guidance, including NIST 800-53, NIST 800-37, NIST 800-60, and DoD 8500.01. Managing Plans of Actions and Milestones (POA&amp;M) originating from these assessments.</li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase.</li> <li>Develop and execute a Continuous Monitoring program for information systems in accordance with NIST 800-53</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the Information System (IS) lifecycle and RMF process</li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis. </li> <li>Conduct required IS vulnerability scans according to risk assessment parameters. </li> <li>Continuously evaluating system security posture, identifying opportunities for improvement, and supporting the implementation of these improvements.</li> <li>Supporting the local SciTec Facility Security Officer (FSO) in ensuring the physical protection of information technology systems, including supporting the deployment of physical security measures such as intrusion detection systems.</li> <li>Contribute to Cybersecurity Maturity Model Certification (CMMC) and NIST SP 800-171 which may include authoring policy and procedure, capturing artifacts, and working related projects.</li> <li>Contributing to other corporate security and information assurance activities throughout the company with System Administrators, Security, and other stakeholders.</li> <li>Successful candidates will have strong written and communication skills to maintain a relationship with government counterparts and other mission partners.</li> <li>Ensure the removal and retirement of ISs being decommissioned in coordination with the system owner</li> <li>At least two years serving as an ISs Security Officer or Manager at a cleared facility. </li> <li>Familiarity with the use and operation of DISA SCAP and STIGViewer tools</li> </ul> <ul> <li>Is technical lead for the Risk Management Framework (RMF) package creation and compliance. </li> </ul> REQUIREMENTS: <ul> <li>Must be a U.S. Citizen. </li> <li>Candidates must have an active Secret government security clearance.</li> <li>2 years of experience specifically supporting the administration of government or contractor information technology systems under the oversight of the DoD or the Intelligence Community.</li> </ul> <ul> <li>4 year degree in Information Technology, Cybersecurity, Computer Science or other related field</li> <li>Must have experience with Windows/Linux based troubleshooting; understand where to locate specific log files for forensics.</li> </ul> <ul> <li>Ability to evaluate effectiveness, suitability, survivability, and interoperability of systems, relating to cybersecurity and provide key feedback to improve the overall cybersecurity posture. </li> <li>Ability to research and develop solutions to emerging cyber threats.</li> <li>Proficient with Microsoft Word, Microsoft Excel, OneDrive. </li> <li>Self-starter with ability to work independently.</li> <li>Ability to understand, explain, interpret, and apply rules, regulations, directives, and procedures.</li> </ul> PREFERRED EXPERIENCE, SKILLS, AND ABILITIES: <ul> <li>An active TOP SECRET clearance.</li> <li>A CISSP (or CISSP Associate) certification, or an alternate qualifying certification satisfying DoD 8570.01M requirements for an Information Assurance Technician Level III or an Information Assurance Manager Level II.</li> <li>Prior successful experience as an ISSM.</li> <li>Prior experience with NIST 800-171, NIST 800-53 (both DIACAP 8500.2 and Risk Management Framework), and Continuous Monitoring and Risk Scoring (CMRS).</li> <li>A college degree in computer science, info tech, info security, or a related field.</li> <li>Experience working with the ELK stack.</li> <li>Experience with Azure, AWS, or similar cloud environments.</li> <li>Have experience with VMware or other virtualization software.</li> <li>Python, PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience administering the system functions including security policies and account management of Microsoft Windows and Server as well as Linux/Unix-based systems.</li> <li>Incident response and reporting experience.</li> </ul>BenefitsAs a small business, SciTec, Inc. offers room for growth and a flexible, fast-paced work environment. We work daily to develop one-of-a-kind solutions for challenging national problems. SciTec encourages collaboration across our offices in Boulder, El Segundo, Dayton, Huntsville, Virginia, and our headquarters in Princeton, and provides access to opportunities across the corporate spectrum. Initiative is expected and encouraged, all employees have the opportunity and flexibility to broaden their technical horizons, and our daily work makes an impact on the world around us. SciTec offers a highly competitive salary and benefits package, including a variety of benefits including health insurance, parental leave, vision, life, and disability insurance, 401(k)plan with employer contribution, holidays and paid time off plans (including vacation and sick time), an annual profit-sharing plan, and an annual performance bonus plan. The salary range for this position is $83,000 to $130,000; however, SciTec considers several factors when extending an offer of employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.

Boulder

Information Systems Security Manager (ISSM)

SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities. SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.RequirementsDuties: <ul> <li>Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for each information system </li> <li>Provide liaison support between the ISSM, system administrators, and system users</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the information system lifecycle </li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis </li> <li>Conduct required information system vulnerability scans according to risk assessment parameters. </li> <li>Develop Plan of Action and Milestones (POAMs) in response to reported security vulnerabilities </li> <li>Coordinate system owner concurrence for correction or mitigation actions </li> <li>Monitor security controls for information systems to maintain security Authorized to Operate (ATO) </li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase </li> <li>Ensure that changes to an information system, its environment, and/or operational needs that may affect the authorization status are reported to the system owner and information system Security Manager (ISSM) </li> <li>Ensure the removal and retirement of information systems being decommissioned in coordination with the system owner and ISSM </li> <li>At least one year serving as an Information Systems Security Officer (ISSO) at a cleared facility. </li> <li>Familiarity with the use and operation of security tools including SCAP, OpenRMF, Tenable Nessus or similar applications. </li> </ul> <ul> <li>The ISSO will apply broad technical, operational, and policy expertise in the management of all aspects of operational Information System Security and Computer Network Defense.</li> <li>Is technical lead for the Risk Management Framework (RMF) package creation and compliance </li> <li>Contribute to Cybersecurity Maturity Model Certification (CMMC) efforts on the unclassified network.</li> <li>Performs other related duties and assignments as required.</li> </ul> Requirements: <ul> <li>Must be a U.S. Citizen. </li> <li>Must have at least a high school diploma.</li> <li>Hold an active Secret, or higher, US government security clearance.</li> </ul> <ul> <li>Have at least two years of systems administration experience.</li> <li>Must have experience with Windows/Linux based troubleshooting; understand where to locate specific log files for forensics.</li> <li>Understanding and practical application with one or more of DoD policies and directives, NIST standards, RMF controls, JSIG, and/or CMMC</li> <li>Experience with certifying compliance of various operating systems.</li> <li>Ability to evaluate effectiveness, suitability, survivability and interoperability of systems, relating to Cybersecurity and provide key feedback to improve the overall Cybersecurity posture </li> <li>Ability to research and develop solutions to emerging cyber threats.</li> <li>Proficient with Microsoft Word, Microsoft Excel, OneDrive </li> <li>Self-starter with ability to work independently</li> <li>Ability to understand, explain, interpret, and apply rules, regulations, directives, and procedures</li> <li>Have a deep understanding of computer operating systems, hardware, and software </li> </ul> Preferred experience, skills, and abilities <ul> <li>Have an active Top Secret security clearance or recently active clearance within 24 months</li> <li>Possess a current DoD 8570 certification (Security+, CISSP, etc.)</li> <li>Four-year degree in Information Technology, Cybersecurity, Computer Science or related field</li> <li>Python, PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience working with the ELK stack.</li> <li>Experience administering the system functions including security policies and account management of Microsoft Windows and Server as well as Linux/Unix-based systems.</li> <li>Have experience with VMware or other virtualization software.</li> <li>Experience with Azure, AWS, or similar cloud environments</li> <li>Have experience working in or directly supporting the DoD or other U.S. government entities</li> <li>Incident handling experience </li> </ul>BenefitsAs a small business, SciTec, Inc. offers room for growth and a flexible, fast-paced work environment. We work daily to develop one-of-a-kind solutions for challenging national problems. SciTec encourages collaboration across our offices in Boulder, El Segundo, Dayton, Huntsville, Virginia, and our headquarters in Princeton, and provides access to opportunities across the corporate spectrum. Initiative is expected and encouraged, all employees have the opportunity and flexibility to broaden their technical horizons, and our daily work makes an impact on the world around us. SciTec offers a highly competitive salary and benefits package, including a variety of benefits including health insurance, parental leave, vision, life, and disability insurance, 401(k)plan with employer contribution, holidays and paid time off plans (including vacation and sick time), an annual profit-sharing plan, and an annual performance bonus plan. The salary range for this position is $87,000 to $20,000; however, SciTec considers several factors when extending an offer of employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.

Information System Security Officer (ISSO)

Rubrik

Rubrik is seeking a Information Security Program Manager to oversee our government security compliance efforts, including FedRAMP and continuous monitoring. The Information Security Program Manager will develop, implement, and assist with the FedRAMP program and other government security compliance programs, such as DoD IL4, StateRAMP,  and other standards, ensuring Rubrik has the necessary government governance practices, policies, and processes at scale.
What you'll be doing:
<ul>
<li>Maintain Rubrik’s FedRAMP / StateRAMP / IL4 Authorization packages and required reporting</li>
<li>Manage security assessments, Plan of Action &amp; Milestones (POA&amp;M) workbook, and ensure Rubrik’s compliance with ongoing Continuous Monitoring (ConMon) and related government requirements.</li>
<li>Partner with Engineering, IT, and other teams across Rubrik to sustain our security posture and scale Rubrik’s FedRAMP and IL environment and program.</li>
<li>Collaborate with process owners and subject matter experts (SMEs) to influence prioritization of projects and solutions to reduce risk and improve compliance.</li>
<li>Coordinate and facilitate relationships with the 3PAO, sponsoring agency/JAB, and FedRAMP PMO, especially for new Sponsor onboarding, significant changes, deviation requests, and security impact analyses of changes.</li>
<li>Maintain membership and potentially lead the Change Control Board and its process/procedures for the FedRAMP environment.</li>
<li>Establish, maintain, and influence program stakeholder relationships, expectations, and communications.</li>
<li>Lead and drive other security projects and initiatives ensuring applicable requirements are addressed.</li>
<li>Effectively influence and collaborate to achieve continual progress on objectives while managing risks.</li>
<li>Review new product features and designs and provide guidance on requirements and standards including NIST 800-53, 800-171, Department of Defense Impact Levels (Cloud Computing SRG), and FedRAMP (Moderate/High) requirements.</li>
</ul>
Experience you'll need
<ul>
<li>6+ years of work experience in Information Security, Federal compliance, or FedRAMP programs in cloud computing, SaaS, or U.S. Government environments.</li>
<li>Experience with standards including FedRAMP, NIST SP 800-53, NIST SP 800-171, FISMA, DoD Impact Levels, CMMC, DISA SRG, etc.</li>
<li>Experience managing continuous monitoring, third-party assessments, audit management, and vulnerability management</li>
<li>Experience leading cross-functional programs with the ability to influence priorities and deliver on commitments.</li>
<li>Experience with SaaS and cloud providers (e.g., AWS, GCP, Azure, etc.).</li>
<li>Driven to organize, establish, and improve processes, balancing speed, efficiency, and effectiveness with internal customer involvement, consensus, and satisfaction</li>
<li>Excellent organizational and program management skills</li>
<li>Excellent interpersonal, verbal, and written communication skills with the ability to communicate complex concepts to a broad range of technical and non-technical audiences</li>
<li>CISA, CISSP, CCSP, CCSK or other related certifications preferred.</li>
</ul>
Pursuant to Colorado regulations, if this job is performed in Colorado, the minimum annual salary is $151,000, plus bonus potential, equity and benefits.
#LI-JS1
#LI-RemoteAbout Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Information Security Program Manager, FedRAMP &amp; Government Compliance

LogRhythm, Inc.

Who we are looking for:
The Director of Security / Deputy CISO has operational oversight of our security operations, security architecture and engineering, product security, physical security, awareness, privacy, governance, risk, and compliance functions in addition to being our liaison for legal and other business units within LogRhythm. You will lead the development and maintenance of our information security architecture, infrastructure, and processes that align to our company and product needs. You will be responsible for developing and ensuring adherence to information security governance, risk management, and compliance with security best practices and our corporate and product certification requirements (SOC2, ISO27001, GDPR, Privacy Shield, HIPAA, PCI, FedRamp, CMMC, DISA APL, FIPS and Common Criteria, etc.). You will have operational responsibility in ensuring our company, our customers, our products, and our data are protected. This is a unique opportunity to lead security in a security company. This position will report directly into the LogRhythm Chief Security Officer.
Here’s an overview of the responsibilities &amp; challenges ahead:
<ul>
<li>Accountable to operationally lead the US based security team</li>
<li>Partner with the Chief Security Officer to lead security strategy (including subsequent financial budgeting)</li>
<li>Work with leaders across the other LogRhythm business units to ensure and continuously improve the security and privacy of our company</li>
<li>Significant focus and oversight of our governance, risk, and compliance program to ensure we reduce risk and meet compliance and legal objectives; to include the review of legal contracts, security questionnaires, vendor management, and adherence to product certification and compliance requirements</li>
<li>Ensure effectiveness and improve security monitoring, detection, and response functions</li>
<li>Actively participate in security architecture with our IT/IS organization, Product Management, and Engineering</li>
<li>Ensure the security program is in sync and operationally effective globally</li>
<li>Create and champion a corporate security culture; an office of “yes and” to ensure we can execute the operations of the business at the lowest level of security risk.</li>
<li>Monitor changes in legislation and accreditation to ensure LogRhythm’s continued compliance</li>
<li>Responsible for reporting key, risk based, performance metrics that demonstrate effectiveness of our program and a return on investment for our executives and the board</li>
<li>Manage and develop security practitioners within the security organization</li>
<li>Build collaborative relationships with key business partners</li>
</ul>
Required Skills: 
<ul>
<li>Previous experience leading security teams and programs with at least 3-5 years in a security management function</li>
<li>Strong experience in cloud, particularly in securing SaaS offerings would be preferred</li>
<li>Strong background in governance, risk, privacy, and compliance; especially within a software or technology service provider</li>
<li>Knowledge of federal and state information security policies, standards, principles, practices, and framework (e.g. FedRamp, CMMC, NIST)</li>
<li>Knowledge of security best practices and frameworks such as ISO27001 and NIST</li>
<li>Knowledge of security architecture and engineering</li>
<li>Fundamental knowledge in cloud, SaaS, and software</li>
<li>Fundamental knowledge of security operations and incident response</li>
<li>Experienced in cross organizational collaboration and delivering key metrics and reporting to all levels, from practitioner to senior leaders and executives</li>
</ul>
Other Qualifications:
<ul>
<li>At least 5-10 years in information security with 3+ years in a management function</li>
<li>CISSP and/or other relevant security certifications are a plus</li>
</ul>
Workplace equality &amp; inclusion are not just words or topics for LogRhythm, they are part of our core values, beliefs, and integral to our company culture. We hire the best of the best and do not discriminate based on race, gender, age, religion, sexual orientation, identity, or other personal factors. LogRhythm was built on the principals of innovation, dedication, creativity, and commitment. It is through these key areas we were able to grow as an equal and inclusive workplace, one where our employees feel respected and safe in.
Benefits:
LogRhythm offers the following benefits for this position, subject to applicable eligibility requirements:




·    Medical


·    Dental


·   401k plan


·  Flexible time off




·    Vision


·    HSA 
·    FSA 


·   EAP


·  Birthday Day off 




Salary:    
The annual starting salary for this position is between 215k-220k Annually depending on experience and other qualifications of the successful candidate.
Bring your Whole Self to Work!
Diversity, equity, and inclusion are at the core of who we are. At LogRhythm, we know that diverse perspectives spark innovation, improve creativity, and position our team for success. Creating a culture where all are welcomed, valued, and empowered to achieve their full potential is important to who we are today and in the future. We hire the best of the best and do not discriminate based on race, gender, age, religion, sexual orientation, identity, or other personal factors.
About us: 
<ul>
<li>Gartner Leader in Security</li>
<li>TB company</li>
<li>Award-winning SIEM Platform</li>
</ul>

United States

Deputy CISO

OSG Analytics

Optimal Strategix Group, Inc. (OSG) is helping global organizations impact business outcomes by uncovering what matters to their most valuable customers. The result of this work informs effective decisioning-making for OSG’s customers, delivering positive revenue and cost savings impacts at every phase of the customer lifecycle. OSG is working with global Fortune 1000 companies across a wide spectrum of industries, but with a concentration in the following: Consumer Goods, Retail, Life Sciences, Medical Technology, Pharmaceuticals, Healthcare, and Public Sector. OSG is headquartered in New York City, and has offices in Bengaluru, India, and Dubai, U.A.E, Brazil, Latin America, and Europe. Why you will love OSG: OSG is leading the CXM and CJM market (estimated at $8 billion) with a highly sophisticated AI/ML platform that helps our clients gain a deep understanding of customer motivation and predicts their next best move for growth. We help companies engage their audience (patients, consumers, etc.) in meaningful ways through data-driven, customized nudges. Our customers include 25+ of the Fortune 500 companies, such as Johnson &amp; Johnson, Kimberly Clark, Baxter Health and many more.Description: • Support and maintain IT Infrastructure, software and hardware assets cloud platforms and third-party applications. • Involved in end-user support and managing client requests for technical support, installations, guidance, and troubleshooting<ul> <li>Coordinates with relevant Platform Owners, System Administrators and/or third-party vendors regarding user support and problem resolution.</li> <li>Assist with developing IT policies around cybersecurity and compliance</li> <li>Assists with evaluating and maintaining compliance with various regulatory requirements including NIST, HIPPA, ISO and PII.</li> <li>Identifies and communicates recommended/required security controls &amp; documents and monitors control implementation.</li> <li>Keeps current with the latest technology and federal security and compliance standards.</li> <li>Other duties may be assigned.</li> <li>Creates user documentation and may train personnel on new applications software</li> <li>Conducts internal IT self-assessments and works closely with internal/external auditors regarding IT security audits and/or assessments (e.g. network, operating system and datacenter), including identifying, evaluating and mitigating vulnerabilities.</li> </ul>Requirements<ul> <li> 2+ years of experience in IT administration, security, and compliance</li> <li>Must have a strong technical knowledge of PC and Desktop hardware as well as Windows 10 Operating Systems.</li> <li>Experience with E-mail management MS Exchange Online/ MS 365 and other applications like Teams, SharePoint and One Drive</li> </ul> • Experience working with various third-party applications like Salesforce, Zoom, Concur, ServiceNow, Workday is preferred<ul><li>Must be highly organized and detail-oriented, with strong analytical problem-solving abilities</li></ul> • Strong customer service skills; display excellent verbal and written communication and interpersonal skills<ul><li>Experience utilizing security standards, assessments and policies</li></ul> • Experience with development and/or maintaining risk and controls programs in complex IT environments<ul><li>Practical and application knowledge of a broad range of US Federal Government and commercial standards and frameworks — for example, NIST Cybersecurity Framework (800-171), CMMC, FedRAMP, DISA/DOD Impact Levels, the ATO process, International Standards Organization (ISO) 27001, IT Infrastructure Library and ISO 20000, CMMC knowledge is preferred</li></ul> Benefits<ul> <li>Competitive Salary</li> <li>Uncapped Commission and Bonus Opportunity</li> <li>Benefits such as Health Insurance, Vision Insurance, Dental Insurance, Life Insurance, Short/Long-term disability</li> </ul>We value diversity and inclusion and encourage all qualified people to apply. If we can make this easier through accommodation in the recruitment process, please make it clear within your cover letter. We will review applications as they are received and look forward to hearing from you. We are an Equal Employment Opportunity Employer

I.T and Security Analyst

Apply to CMMC Cyber Security Jobs in companies remotely and near you. New CMMC Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Information Systems Security Manager (ISSM) at SciTec	Full Time Manager DOD Windows AWS
Information System Security Officer (ISSO) at SciTec	Full Time Manager DOD Windows AWS
Information Security Program Manager, FedRAMP & Government Compliance at Rubrik	Remote Full Time CCSP Audit Analyst
Deputy CISO at LogRhythm, Inc.	Cissp Cloud CMMC Compliance Fedramp
I.T and Security Analyst at OSG Analytics	Audits Cloud CMMC Compliance DOD

CMMC Cyber Security Jobs

0 CMMC Cyber Security Jobs. Page 1 of 1

5 closed cmmc cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

CMMC Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

CMMC Cyber Security Jobs

0 CMMC Cyber Security Jobs. Page 1 of 1

5 closed cmmc cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

CMMC Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter