Security Compliance Project Manager

Overview

As the Security Compliance Project Manager, you will manage the process for compliance with government and industry information security standards and affiliated security assessments such as ISO 27001, SOC2, the DoD Cloud Computing Security Requirements Guide (CC SRG) Impact Levels, FedRAMP, and the DoD Cybersecurity Maturity Model Certification (CMMC) program. This includes facilitating security assessments, updating required compliance artifacts and evidence, managing external vendors, identifying issues for resolution, and tracking status for each process.

Responsibilities

• Manage and maintain version control of all documentation related to compliance for each standard and track the implementation status of every security control either using government systems such as eMASS or internal databases.
• Oversee preparation and execution of external compliance audits.
• Support mapping of compliance requirements to security control implementation using the company requirements generation and agile development processes.
• Maintain Documentation and other compliance artifact.
• Organize and maintain continuous monitoring data, vulnerability scans and POA&Ms reports for external agencies.
• Contribute to vulnerability and risk reports to the CSO and Senior Leadership.

Qualifications

• Required experience:
  • 3 years of compliance audit and implementation experience with Government compliance requirements such as DISA SRG Impact Levels, FedRAMP, and NIST 800-53, NIST 800-171, NIST SP 800-37, ISO 27001, SOC2, HIPAA and US Government ATOs.
  • High proficiency with software tools such as productivity and project management tools.
• Clearance Statement: Applicants selected for this position must be a US citizen with a Secret security clearance with eligibility to obtain a DoD Top Secret clearance with Tier 5 background investigation.