| Location | Los Angeles, CA |
Key Responsibilities:
" Support the Risk Management Framework (RMF) processes and system authorization lifecycle
" Experience with GRC platforms (ServiceNow GRC)
" Create systems baseline using NIST 800-53 security controls.
" Develop, review, and maintain security documentation (SSPs, POA&Ms, Policies and procedures, etc.)
" Perform security control assessments and validation activities
" Ensure compliance with NIST, ISO 27001, PCI, TSA and applicable regulatory frameworks
" Conduct vulnerability assessments and track remediation efforts through risk registry.
" Work with system owners to identify, document, and mitigate risks
" Monitor systems for compliance with security baselines and policies
" Support audit readiness and respond to audit findings
" Coordinate incident response activities and ensure proper reporting
" Provide security guidance and awareness to stakeholders
" Prepare and deliver regular status and risk reports
" Collaborate with cross-functional teams to strengthen security posture
Qualifications
" Proven experience as an Information System Security Officer (ISSO) or similar cybersecurity role
" Strong knowledge of NIST RMF (CSF, 800-53) and related standards
" Experience with security compliance frameworks NIST CSF 2.0, NIST 800-53 and NIST SP 800-161
" Familiarity with vulnerability management tools and security assessment methodologies
" Knowledge of cloud security (Azure, AWS, or GCP) is a plus
" Strong understanding of network, application, and data security principles
" Relevant certifications preferred (e.g., CISSP, CISM, CISA, Security+)
" Excellent analytical, documentation, and communication skills
" Ability to work effectively with both technical and non-technical stakeholders