information systems security manager

Arpatech (Pvt.) Ltd

We&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies.Key Responsibilities: 1. Lead and manage enterprise-wide information security initiatives. 2. Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred). 3. Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps). 4. Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices. 5. Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks. 6. Act as a key liaison during security audits and assessments. 7. Promote awareness and training to build a strong internal security culture. 8. Strong understanding of SDLC.Requirements: 1. Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus). 2. Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role. 3. Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies. 4. Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices. 5. Proven track record in security compliance, governance, and risk management. 6. Experience working with or managing Wazuh or similar SIEM platforms is highly desirable. 7. Industry certifications such as CISSP, CISM, or CISA are a strong plus.Location: Karachi (on-site) Shift: 9 AM to 6 PMJob Type: Full-timeWork Location: In person

Information Security Manager

VRG Pvt. Ltd.

&middot; Working with all business units to determine possible risks and risk management process, acquiring the correct technology and analyzing IT security threats and their mitigation.&middot; Ensuring the newly acquired technology complies with the SBP &amp; PTA IT security regulations.&middot; Planning, designing and implementing IT Security parameters on the Network, Applications and infrastructure of the company.&middot; Ensuring that no internal breaches or misuse of data take place.&middot; Individual must be able to multi task and work Knowledge of the following, Operating Systems, Virtualization, Authentication technologies (1 or more) - AD, Single Sign-On, Federation, Radius, Multi-factor etc. Relational Databases and familiarity of huge data systems, backups and replication System design principles and architecture, secure design, system hardening, compliance, disaster recovery, ITSM principles.&middot; Individual will provide a variety of basic Information Security administration services working with a web-based request management tools and problem management tools.&middot; Additional tasks could include executing and producing customer and information security reports to share with management.Requirement:Education: Masters / Bachelors in Computer Science, Information technology, or a related field.Age Limit: 30 to 45Experience:7+ Years in risk management, information security or programming.An exceptional understanding of information security management frameworks such as ISO/IEC 27001 and NIST.Good understanding of scripting and source code programming languages, such as C#, C++, .Net and Java.Good understanding of current legislation and regulations.Skills:Certified CISM or CISSPProject Management and leadership skills.First rate written and verbal communication skills.Please share your resume at adeel.ahmed@vrgworld.comJob Type: Full-timeWork Location: In person

Information Security Manager - Financial Services (Immediate Hiring)

Raytheon

<div>Date Posted:
2025-11-10
Country:
United States of America
Location:
CA220: 2202 E El Segundo Blvd BldgE02 2002 East El Segundo Boulevard Building E02, El Segundo, CA, 90245 USA
Position Role Type:
Onsite
U.S. Citizen, U.S. Person, or Immigration Status Requirements:
Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Security Clearance:
DoD Clearance: Secret
RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses &ndash; Collins Aerospace Systems, Pratt &amp; Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA.
The following position is to join our RTX Corporate team:
The ISSO assists the Information System Security Manager (ISSM) to provide oversight for the information systems security control methods, mitigations, and tools throughout a systems&rsquo; lifecycle in compliance with U.S. Department of Defense (DoD) security laws, regulations and guidelines. The ISSO will participate in projects, guide and counsel internal customers, assist in developing and maintaining program/dataset specific processes and standards, and provide training and guidance on tools and methods to other members of the cybersecurity team.
What You Will Do<ul><li>
The ISSO is primarily responsible for system compliance, auditing and delivering information systems security education and awareness.</li><li>
The ISSO will assist in investigating information system security violations and help prepare reports specifying corrective and preventative actions.</li><li>
Perform security sustainment activities (hardware change management, software change management, account management, media protection, user interface, file transfers, etc.).</li><li>
Assists in overseeing and managing the patch management process and execution across enterprise networks. Verifying the implementation of delegated aspects of the system security program.</li><li>
Ensuring audit records are collected and analyzed in accordance with the security plan.</li><li>
Individuals will develop, update, and/or review Risk Management Framework (RMF) documentation to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Action and Milestone (POA&amp;M), Risk Assessment Report (RAR), as assigned by the ISSM.</li><li>
Collaborates with CDS and peer BU ISSMs/ISSOs for alignment and sharing of best practices.</li></ul>
Qualifications You Must Have<ul><li>
Bachelor&rsquo;s Degree with 5 years of relevant experience managing and implementing security program requirements in a classified environment, or an advanced degree with 3 years of relevant experience working in a classified environment.</li><li>
Compliance-based auditing using the RMF, Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Process Manual (DAAPM), or National Industrial Security Program Operating Manual (NISPOM).</li><li>
Certifications equivalent to or exceeding DoD 8570.01-M IAM Level I functional and baseline certification requirements.</li><li>
Knowledge and/or experience with STIGs, SCAP, Splunk, Tenable or other system hardening and compliance, vulnerability assessment, network security and/or SIEM tools.</li><li>
Must posses a DoD Secret Security clearance</li></ul>
Qualifications We Prefer<ul><li>
Experience working in DoD classified operating environments and/or in the execution of the Assessment &amp; Authorization processes, as defined within the Risk Managed Framework (RMF), NIST 800-53- Rev 4</li><li>
Experience with Scaled Agile Framework (SAFe) work practices.</li><li>
Experience with large multi-facility networks including various and complex components.</li><li>
Excellent oral and written communication skills with attention to detail and ability to multitask.</li><li>
Ability to adapt to rapidly changing environment and work under pressure to meet project deadlines.</li></ul>
What We Offer: Whether you&rsquo;re just starting out on your career journey or are an experienced professional, we offer a robust total rewards package with compensation; healthcare, wellness, retirement and work/life benefits; career development and recognition programs. Some of the benefits we offer include parental (including paternal) leave, flexible work schedules, achievement awards, educational assistance and child/adult backup care.
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.
The salary range for this role is 90,000 USD - 182,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate&rsquo;s work experience, location, education/training, and key skills.
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company&rsquo;s performance.
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans&rsquo; Readjustment Assistance Act.
Privacy Policy and Terms:
Click on this link to read the Policy and Terms</div>

eWAN Information System Security Officer (ISSO) Onsite

TekSynap

<div>Responsibilities and Qualifications:

RESPONSIBILITIES<ul><li>
Serve as a cybersecurity SME, providing support for ESS and EKC system assessments.</li><li>
Fully versed in the general tenets of the DoD's authorization process, including relevant cybersecurity policies, procedures, and processes.</li><li>
Support the DoD cybersecurity process by serving as a SME for ESS and/or EKC systems undergoing authorization.</li><li>
Design, develop, and implement cybersecurity measures into systems, delivering comprehensive cybersecurity assessment documentation.</li><li>
Understand and apply security controls identified in NIST 800-53 to the process of assessing and authorizing DLA ESS and EKC systems.</li><li>
Determine the severity value of identified vulnerabilities and assess their potential impact on the system's current or future authorization status.</li><li>
Perform key functions related to security control selection, implementation, and documentation.</li><li>
Collaborate closely with the Information Systems Security Manager (ISSM) on complex system details.</li><li>
Monitor and control communications at key internal boundaries among subsystems and provide system-wide common controls that meet or exceed the requirements of constituent subsystems.</li><li>
Lead the development, integration, and testing processes to deliver and deploy production-ready systems that meet business requirements and project schedules.</li><li>
Work closely with product management to translate business requirements into technical solutions, architecture design, level of effort, and project schedule.</li><li>
Design architecture and establish best practices to produce efficient and effective system operations while minimizing refactoring and rework.</li><li>
Provide support for the Security Technical Implementation Guides (STIGs) process and develop and submit cybersecurity documentation as required.</li><li>
Ensure the implementation of DoD STIG compliance for ESS/EKC systems/applications and maintain compliance with required DoD STIGs.</li><li>
Support reviews associated with STIGs, cyber assessments, and continuous monitoring activities.</li></ul>
REQUIRED QUALIFICATIONS<ul><li>
Experience:</li><li><ul><li>
Five (5) years of relevant C&amp;A experience</li><li>
MF and NIST C&amp;A experience</li><li>
DOD cybersecurity experience</li></ul></li><li>
Certifications: (One of the following)</li><li><ul><li>
CGRC/CAP</li><li>
CASP+</li><li>
CCSP</li><li>
SSCP</li><li>
Security+</li><li>
GSEC</li><li>
CISM</li><li>
CISSO</li><li>
FITSP-M</li><li>
GCIA</li><li>
GCSA</li><li>
GCIH</li><li>
GSLC</li><li>
GICSP</li><li>
CISSP-ISSMP</li><li>
CISSP</li></ul></li><li>
Clearance:</li><li><ul><li>
Must possess a Secret security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC).</li></ul></li></ul>
Overview:
<div>
We are seeking a Senior System Security / Cybersecurity Analyst to join our team supporting DLA Integrated Electronic Security Systems (IESS) and Electronic Key Control (EKC).</div><div></div><div> 
TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. &ldquo;Technology moving at the speed of thought&rdquo; embodies these principles &ndash; the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.</div><div></div><div> 
We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays.</div>
Visit us at www.TekSynap.com.
Apply now to explore jobs with us!
The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation.
By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond &quot;STOP&quot;. As part of the application process, you agree that TekSynap Corporation may retain and use your name, e-mail, and contact information for purposes related to employment consideration.
Additional Job Information:

WORK ENVIRONMENT AND PHYSICAL DEMANDS
The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.<ul><li>
Location: Columbus, OH</li><li>
Type of environment: On Site</li><li>
Noise level: Medium</li><li>
Work schedule: Schedule is day shift Monday &ndash; Friday. May be requested to work evenings and weekends to meet program and contract needs.</li><li>
Amount of Travel: Less than 10%</li></ul>
PHYSICAL DEMANDS
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 
While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds. The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus. 
WORK AUTHORIZATION/SECURITY CLEARANCE
U.S. Citizen
Secret security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC).<div></div><div> 
OTHER INFORMATION</div><div>
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.</div><div></div><div> 
TekSynap is a drug-free workplace. We reserve the right to conduct drug testing in accordance with federal, state, and local laws. All employees and candidates may be subject to drug screening if deemed necessary to ensure a safe and compliant working environment.</div> 
EQUAL EMPLOYMENT OPPORTUNITY
In order to provide equal employment and advancement opportunities to all individuals, employment decisions will be based on merit, qualifications, and abilities. TekSynap does not discriminate against any person because of race, color, creed, religion, sex, sexual orientation, gender identity, protected veteran status, national origin, disability, age, genetic information, or any other characteristic protected by law (referred to as &ldquo;protected status&rdquo;). This nondiscrimination policy extends to all terms, conditions, and privileges of employment as well as the use of all company facilities, participation in all company-sponsored activities, and all employment actions such as promotions, compensation, benefits, and termination of employment. 
TekSynap is committed to ensuring that our online application process provides an equal employment opportunity to all job seekers, including individuals with disabilities. If you believe you need a reasonable accommodation in order to search for a job opening or to submit an application, please contact hr@teksynap.com for assistance.</div>

Senior System Security / Cybersecurity Analyst

Rolls Royce

Job Description Job Title: Contractor Program Security Officer (CPSO) Working Pattern: Fulltime - onsite (WFH every other Friday) Working location: Indianapolis, IN Rolls-Royce is in search of a multi-faceted security professional in support of multiple USG Defense programs. As the Contractor Program Security Officer (CPSO), you will act as the primary accountable person for our sensitive programs; however, you will work within a core team of CPSOs. Our other CPSO and Assistant CPSO will accompany you in attending meetings, routine engagements with the Program Management Office and more. Why Rolls-Royce? Rolls-Royce is one of the most enduring and iconic brands in the world and has been at the forefront of innovation for over a century. We design, build and service systems that provide critical power to customers where safety and reliability are paramount. We are proud to be a force for progress, powering, protecting and connecting people everywhere. We want to ensure that the excellence and ingenuity that has shaped our history continues into our future and we need people like you to come and join us on this journey. Rolls-Royce has been recognized as the top employer in the Engineering & Manufacturing category on the prestigious Forbes Top Employers for Engineers list for 2025. This ranking highlights our commitment to innovation, employee development, and fostering a collaborative environment where engineers can thrive. At Rolls-Royce, we are committed to creating a workplace where all employees feel respected, supported, and empowered to do their best work. We foster a welcoming and innovative work environment that invests in you, giving you access to an incredible breadth and depth of opportunities where you can grow your career and make a difference. Rolls-Royce is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any protected characteristics. What you will be doing: With this attractive opportunity you will be the gatekeeper for access, and the enforcer as it pertains to policies, compliance, and maintenance of program under our purview. The candidate will ultimately report to the Facility Security Officer (FSO). Key Responsibilities: <ul><li>Assist the Facility Security Officer (FSO): Specifically in the enforcement of policies and procedures to ensure that national security, sensitive information, intellectual property, and company personnel & assets are safeguarded in accordance with: DoD Manual 5205.07; 32 CFR Part 117 (NISPOM); ICD 705; and any other relevant guidance manuals or Security Directives. </li><li>Supports the Information Systems Security Managers (ISSMs) and Information Systems Security Officers (ISSOs) as it pertains to accountable items such as media and transfers, through document control measures. </li><li>Prepare and review administrative documentation, program access request forms, visitor control, and resolve program-related security issues. </li><li>Administer indoctrinations, program specific training, and debriefs. </li><li>Conduct investigations, security reviews, annual security trainings. </li><li>Complete annual self-inspections. </li><li>Oversees physical security requirements to ICD-705 standards; as well as provide input/oversight to any facility maintenance and upgrades. </li><li>Reviews all contractual requirements in DD Form 254s to extract security obligations; ensuring leadership remains cognizant of security-related concerns, in regard to new and existing programs. </li><li>Develop, implement, and enforce security plans, Standard Operating Procedures (SOPs), and policies specific to each program. </li></ul> Who we're looking for: At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process. They are the fundamental qualities that we seek for all roles Basic Requirements: <ul><li>Must have or be able to obtain a US DoD Top Secret Security Clearance. Must be US Citizen. </li><li>Bachelor's degree with 5+ years of corporate security, government security, regulatory compliance, and /or risk management experience. </li><li>A Master s degree with 3+ years of corporate security, government security, regulatory compliance, and /or risk management experience. OR; </li><li>A JD/PhD with 0 years experience OR; </li><li>In lieu of degree, 9+ years of corporate security, government security, regulatory compliance, and /or risk management experience. </li><li>Experience with security systems such as DISS, JADE, CORE and Savannah. </li><li>Excellent organizational and project management skills. </li><li>Strong communication and interpersonal skills. </li></ul> Preferred Requirements: <ul><li>Prior security program management experience. </li><li>Extensive SAP / industrial security experience </li><li>Experience working on multiple projects simultaneously with critical deadlines. </li><li>Extensive experience in security education (in-brief/out-brief), and training newly accessed personnel across a diverse work environment. </li></ul> What we offer: We offer excellent development opportunities, a competitive salary, and exceptional benefits. These include bonus, employee support assistance and employee discounts. Your needs are as unique as you are. Hybrid working is a way in which our people can balance their time between the office, home, or another remote location. It's a locally managed and flexed informal discretionary arrangement. As a minimum we're all expected to attend the workplace for collaboration and other specific reasons, on average three days per week. Job Category Security and Resilience Job Posting Date 22 Oct 2025; 00:10 Pay Range $99,987 -$162,479-Annually Location: Indianapolis, IN Benefits Rolls-Royce provides a comprehensive and competitive Total Rewards package that includes base pay and a discretionary bonus plan. Eligible employees may have the opportunity to enroll in other benefits, including health, dental, vision, disability, life and accidental death & dismemberment insurance; a flexible spending account; a health savings account; a 401(k) retirement savings plan with a company match; Employee Assistance Program; Paid Time Off; certain paid holidays; paid parental and family care leave; tuition reimbursement; and a long-term incentive plan. The options available to an employee may vary depending on eligibility factors such as date of hire, employment type, and the applicability of collective bargaining agreements. PandoLogic. Category:Technology,

Contractor Program Security Officer (CPSO)

KAUST (King Abdullah University of Science and Technology)

<div>
 
 
 About the Role
 
 
 
 
 
 
 The Information System Security Principal (ISSP) is responsible for ensuring the overall security and compliance of the organization&rsquo;s supercomputer environment. The ISSP provides leadership and assurance by owning and executing the System Security Plan (SSP), coordinating implementation of required controls, overseeing risk and incident management, and serving as the key liaison between technical teams, cybersecurity, export control, legal, and governance committees. This role requires a senior-level professional with deep expertise in security architecture, Zero Trust principles, and governance frameworks, able to influence cross-functional teams without direct authority. The ISSP does not have direct reports but serves as the system-level security authority, leading by influence and collaborating across IT, cybersecurity, operations, legal, and compliance teams. The role provides executive-level visibility into risks and ensures that the supercomputer remains secure, compliant, and aligned with mission and research objectives to maintain the system's authorization to operate certificate.
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 
 <ul>
 <li>
 Lead the continuous development updates, ownership, and maintenance of the System Security Plan (SSP) for the supercomputing environment, ensuring it accurately reflects the system&rsquo;s architecture, controls, and operating context.
 </li>
 <li>
 Coordinate with IT infrastructure, cybersecurity, HPC administrators, and research program teams to ensure all required security controls in the SSP are implemented, validated, and continuously monitored.
 </li>
 <li>
 Translate regulatory, compliance, and security requirements into clear control ownership assignments across technical and non-technical teams.
 </li>
 <li>
 Track, validate, and report on evidence of control implementation provided by system owners, administrators, and support teams.
 </li>
 <li>
 Manage and maintain Plan of Action and Milestones (POA&amp;Ms), ensuring that gaps identified during audits, assessments, or incidents are remediated on time.
 </li>
 <li>
 Facilitate regular reviews and updates of the SSP to reflect changes in system design, architecture, users, or regulatory requirements.
 </li>
 <li>
 Act as the single point of accountability for ensuring the SSP remains audit-ready, accurate, and aligned with the operational reality of the supercomputer.
 </li>
 <li>
 Drive SSP execution across teams by coordinating activities such as vulnerability management, access control enforcement, logging/monitoring, and patch management, ensuring they are consistent with SSP control requirements.
 </li>
 <li>
 Provide training and guidance to system owners and administrators on their responsibilities related to SSP controls.
 </li>
 <li>
 Ensure executive-level visibility by reporting SSP status, risks, and gaps to the Supercomputer Security Steering Committee, Legal, and Compliance functions.
 </li>
 <li>
 Serve as the liaison to auditors, assessors, and authorizing officials, representing the supercomputer&rsquo;s security posture and SSP implementation progress.
 </li>
 </ul>
 
 
 
 
 
 Qualifications
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience).
 </li>
 <li>
 Preferred: Master&rsquo;s degree in Cybersecurity, Information Assurance, or related field.
 </li>
 <li>
 Professional certifications such as: CISSP, CISM, CCSP, CAP, GDSA, GCCC.
 </li>
 <li>
 Zero Trust&ndash;related certifications (e.g., NIST ZTA training, Microsoft SC-100, vendor-specific ZTNA certifications).
 </li>
 </ul>
 
 
 
 
 
 Required Skills
 
 
 
 
 
 <ul>
 <li>
 Well-rounded senior security expert with both architectural and assurance expertise.
 </li>
 <li>
 Influential communicator who can bridge technical, compliance, and legal perspectives.
 </li>
 <li>
 Calm under pressure, especially in high-visibility incident situations.
 </li>
 <li>
 Forward-looking, with the ability to integrate Zero Trust and modern security approaches into HPC environments.
 </li>
 <li>
 Strategic problem-solver who balances security, performance, and mission-critical research needs.
 </li>
 <li>
 SSP Program Management: Skilled at managing the end-to-end lifecycle of the System Security Plan, ensuring accuracy, execution, and accountability across multiple teams.
 </li>
 <li>
 Control Assurance: Ability to track, validate, and report on implementation of security controls, including evidence collection and POA&amp;M management.
 </li>
 <li>
 Cross-Team Coordination: Effective at driving accountability across IT, HPC, cybersecurity, research, legal, and compliance teams without direct authority.
 </li>
 <li>
 Security Architecture Expertise: Strong knowledge of Zero Trust Architecture, encryption, network segmentation, and identity/access management.
 </li>
 <li>
 Governance and Compliance Knowledge: Deep understanding of NIST SP 800-53, NIST RMF, ISO 27001, FISMA/FedRAMP, and export control requirements.
 </li>
 <li>
 Technical Competence in HPC: Familiarity with Linux/Unix and Windows environments, HPC architecture, and research computing infrastructures.
 </li>
 <li>
 Risk and Incident Management: Skilled in risk assessment, incident response coordination, and integrating lessons learned into continuous monitoring.
 </li>
 <li>
 Executive Communication: Ability to provide clear, concise updates and recommendations to steering committees, auditors, and authorizing officials.
 </li>
 </ul>
</div>

Information System Security Principal

KPMG

<div>JOB DESCRIPTION 
 
About KPMG in India
KPMG entities in India are professional services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Jaipur, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada.
KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment.
<ul><li>- 
</li></ul><div><div><div><div>Equal employment opportunity information 
 
KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.</div></div></div></div></div>
 <div><ul><li>QUALIFICATIONS 
 
</li></ul></div>

Assitant Manager - Info Sec and Tech Risk Assessments

Search 10000+ Information systems security manager jobs near you this November. New roles added regularly across leading industries. Apply today.