- NVIDIA (Santa Clara, CA)
- … Manager (CISM), Certified Information Systems Auditor (CISA), ISO 27001 Lead Auditor/Implementer, CMMC Certified Professional or Assessor , NIST Cybersecurity ... We're seeking a dedicated Information Security professional to join our team in Santa...opportunity is for you. What you'll be doing: + Lead the lifecycle including planning, execution and improvement of… more
- The Gleason Works (Rochester, NY)
- …Cybersecurity Framework + What this means for the role: You will map existing security controls to NIST control families (Access Control , Incident Response, ... effectiveness, implement compensating controls where needed, and maintain System Security Plans (SSPs) documenting how each NIST control...from CrowdStrike, NG SIEM, firewalls, Azure AD, and M365 security tools + Lead or support … more
- Guidehouse (Reston, VA)
- …managerial practices. + Act as a high-level assessor to help all the Security Control Assessors (SCA) on the RMF Team with their assessments and assessment ... continuous monitoring, risk scoring, and risk management experience to lead our team of Assessors in conducting rigorous technical...of assessment methodologies and tools. + Mentor to junior Security Control Assessors **What You Will Need**… more
- Guidehouse (Charleston, SC)
- …Host Based Security System (HBSS) may be required to hold an Interim Security Control Assessor qualification. + FIVE (5) years of experience supporting ... Authority to Operate (ATO) requirements or CSSP Accreditation. + Conduct and lead risk assessments and managing risks. Develop and implement cybersecurity policies… more
- BAE Systems (Sterling, VA)
- …in order to ensure it s easy to understand. + Document the various security control implementations as well as gather the artifacts that support the ... is helpful, but not required for the following general topics: Cloud security control implementation, PKI implementation, STIG compliance and vulnerability… more
- The Boeing Company (Seattle, WA)
- …for scientific integrity, psychometric validation, operational delivery, rigorous quality control , and strong program and project management for executive ... oversight of delivery (milestones, KPIs, risks, stakeholder engagement), and lead operational execution. + Psychometrics, validation & quality assurance: Design… more
- NY CREATES (Albany, NY)
- …risk management framework: develop tiering model, author due diligence questionnaires, lead evidence reviews, negotiate contractual security clauses, and enforce ... Assessor /Professional (CCA/CCP) + ISACA Certified in Risk and Information Systems Control (CRISC) + (ISC)- Certified Information Systems Security Professional… more
- Cardinal Health (Annapolis, MD)
- …solutions and strategies that enable operations and drive business value. **Information Security and Risk** develops, implements, and enforces security controls ... and Compliance** function within the organization develops, enhances, and maintains security policies and IT compliance programs in alignment with regulatory, legal,… more
- BAE Systems (Sterling Heights, MI)
- …M&S team to ensure models have most current and accurate input values and control logic. + Lead Components Source Selection activities to include: Creating ... products and systems that support enhanced military capabilities, protect national security , and keep critical information and infrastructure secure. With us, you… more
- CGI Technologies and Solutions, Inc. (Radford, VA)
- …Technical Implementation Guides (STIG), Security Requirement Guides (SRG), RMF, Security Control Assessor -Validator (SCA-V), and Cyber Operational ... the Army's PL ALTESS contract. PL ALTESS, or Product Lead for Acquisition, Logistics, and Technology Enterprise Systems and...hardening of the servers and reporting of the overall security and operational status. The position will also recommend… more