Information System Security Manager (ISSM), Public Sector job opportunity at Scale AI.

Diploma

St. Louis, MO; Washington, DC, United States Of America

St. Louis, MO;..........United States Of America

summarize with Ai

Lead public sector #security compliance #projects and #audits (FedRAMP HIGH, DoD Cloud Computing SRG IL4/IL5/IL6 , NIST 800-53 rev 5, NIST 800-171/CMMC, #Risk Management Framework) __ Collaborate with #product, engineering, security, operations, people operations, and legal to implement new technical, administrative, and operational controls __ Work with 3PAOs and federal government AOs to achieve compliance certifications and reports __ Ensure the implementation, oversight, monitoring, and maintenance of security configurations, practices, and procedures __ Serve as a liaison between system owners and other security personnel, ensuring that selected security controls are effectively implemented and maintained throughout the lifecycle of projects __ Act as a liaison between system owners and other security personnel to facilitate effective communication and collaboration __ Develop, maintain, review, and update system security documentation on a continuous basis __ Conduct required vulnerability scans and develop Plan of Action and Milestones (POAMs) in response to reported security vulnerabilities. Manage risks by coordinating correction or mitigation actions and tracking the completion of POAMs __ Coordinate system owner concurrence for correction or mitigation actions and monitor security controls to maintain security Authorized To Operate (ATO) __ Upload security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS or Xacta) to support security control implementation during the monitoring phase __ Lead Risk Management Assessment and Authorization (A&A) processes for deployments __ Perform Cloud system risk assessments, enhance process workflows, and develop new processes __ Implement all applicable manual Security Technical Implementation Guides (STIGs), vendor hardening guides and ensuring timely installation of all available patches __ Create and maintain ATO packages __ Lead security compliance reviews for new products, changes, and features __ Proactively evaluate and advise the business on new and evolving certification programs, requirements, and technologies __ Develop and provide training to improve the security awareness and knowledge for all employees and contractors