information systems security manager

Revolut

<div>About Revolut
People deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products &mdash; including spending, saving, investing, exchanging, travelling, and more &mdash; help our 70+ million customers get more from their money every day.
As we continue our lightning-fast growth,&zwnj; 2 things are essential to our success: our people and our culture. In recognition of our outstanding employee experience, we've been certified as a Great Place to Work&trade;. So far, we have 13,000+ people working around the world, from our offices and remotely, to help us achieve our mission. And we're looking for more brilliant people. People who love building great products, redefining success, and turning the complexity of a chaotic world into the simplicity of a beautiful solution.
About the role
Our Information Security team protects Revolut's systems, data, and people. They combine technical expertise with a proactive, risk-based mindset to stay ahead of threats and keep our technology and customers secure at every step.
We're looking for an Information Security Manager to lead our local security strategy and collaborate with regulators, management, and the Risk and Compliance team. You&rsquo;ll oversee the entire security lifecycle, from identifying risks and managing vulnerabilities to ensuring our third-party vendors meet strict standards.
Up to shape what's next in finance? Let's get in touch.
What you'll be doing<ul><li>
Classifying information assets according to security requirements and maintaining detailed asset and data inventories</li><li>
Developing, implementing, and regularly updating information security policies, procedures, and standards in line with regulatory requirements (BDDK, ISO 27001, PCI-DSS)</li><li>
Establishing identity authentication mechanisms and network security control systems according to regulatory standards</li><li>
Protecting confidential information and managing limited access permissions for third-party service providers and vendors</li><li>
Establishing and managing cyber incident response processes</li><li>
Identifying, assessing, and prioritising information security risks across systems, networks, and data assets while monitoring mitigation controls</li><li>
Overseeing periodic vulnerability assessments and penetration tests and tracking the remediation of identified weaknesses</li><li>
Ensuring full alignment with BDDK's IT regulations, KVKK, and other applicable frameworks while supporting regulatory audits</li><li>
Designing and testing business continuity and disaster recovery plans to ensure operational resilience</li><li>
Conducting information security awareness activities, including bulletins, communications, and regular phishing simulation tests</li><li>
Providing regular reporting to the board, senior management, and regulatory bodies regarding security posture and control effectiveness</li></ul>
What you'll need<ul><li>
7+ years of experience in information security management, ideally within a regulated financial institution (financial services, banking, or payments)</li><li>
Relevant certifications, such as CISM, CISSP, ISO 27001 Lead Implementer</li><li>
Knowledge of BDDK BS regulation, KVKK, ISO 27001, PCI-DSS, and COBIT</li><li>
A university degree in computer engineering, information systems, or related field</li><li>
Expertise in managing outsourced IT and InfoSec services</li><li>
Experience delivering localised IT and InfoSec policies aligned with regulatory standards</li><li>
Excellent stakeholder management and communication skills</li></ul>
Building a global financial super app isn&rsquo;t enough. Our Revoluters are a priority, and that&rsquo;s why in 2021 we launched our inaugural D&amp;I Framework, designed to help us thrive and grow everyday. We're not just doing this because it's the right thing to do. We&rsquo;re doing it because we know that seeking out diverse talent and creating an inclusive workplace is the way to create exceptional, innovative products and services for our customers. That&rsquo;s why we encourage applications from people with diverse backgrounds and experiences to join this multicultural, hard-working team.
Important notice for candidates:
Job scams are on the rise. Please keep these guidelines in mind when applying for any open roles.<ul><li>Only apply through official Revolut channels. We don&rsquo;t use any third-party services or platforms for our recruitment.</li><li>Always double-check the emails you receive. Make sure all communications are being done through official Revolut emails, with an @revolut.com domain.</li></ul>
We won't ask for payment or personal financial information during the hiring process. If anyone does ask you for this, it&rsquo;s a scam. Report it immediately.
By submitting this application, I confirm that all the information given by me in this application for employment and any additional documents attached hereto are true to the best of my knowledge and that I have not wilfully suppressed any material fact. I confirm I have disclosed if applicable any previous employment with Revolut. I accept that if any of the information given by me in this application is in any way false or incorrect, my application may be rejected, any offer of employment may be withdrawn or my employment with Revolut may be terminated summarily or I may be dismissed. By submitting this application, I agree that my personal data will be processed in accordance with Revolut's Candidate Privacy Notice
Notice: This is a remote position based in Turkey.</div>

Information Security Manager

Peraton

<div><div><h5 class="jobSectionHeader">ABOUT PERATON</h5>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</div><div><h5 class="jobSectionHeader">
ABOUT THE ROLE</h5><div><div>
Peraton has an opening for an Information Systems Security Officer (ISSO) with a proven track record of DevSecOps success to include a combination of technical skills, communication skills, and cybersecurity skills. The successful candidate will be responsible for ensuring the implementation and maintenance of security controls in accordance with RMF v5, managing ATO packages, drafting security documentation including Operating Procedures, Cybersecurity Strategy (CSS), System Security Plans (SSP) ATO packages as well as System Security and Privacy Plan (SSPP) in accordance with DoD policies, Department of Airforce (DAF) regulations and our Federal Government customer's guidance.</div><div></div><div> 
The candidate must have expert knowledge and demonstrated experience with cybersecurity technologies, risk management, and incident response procedures as well as have a solid working understanding of computer functions, including hardware, software, and operating systems. This includes knowledge of Windows, Unix, and Linux operating systems, along with other applications such as databases, web servers, networking technologies, including routing, switching, and VPNs. It&rsquo;s a bonus if the candidate has experience with cloud computing platforms such as AWS and Azure.</div><div></div><div> 
The ISSO must be able to work autonomously, manage their workload effectively, shift priorities with little to no loss of productivity and communicate effectively with technical and non-technical personnel.</div><div></div><ul><li> 
This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area.</li></ul></div></div><div><h5 class="jobSectionHeader">
QUALIFICATIONS</h5><div><div>
Required Qualifications:</div><ul><li>
Well-versed in best practices for cyber security program standards, processes, and procedures compliance, industry-standard security frameworks and demonstrated expert working knowledge of NIST Special Publication (SP) 800-53: Recommended Security Controls for Federal Information Systems, NIST SP 800-53A: Guide for Assessing the Security Controls in Federal Information Systems, AFPD 17-1 and AFI 17-130, Cybersecurity Program Management.</li><li>
Ability writing security policies and procedures, CSS, SSP, SSPP, and assess all ATO package artifacts.</li><li>
Expert knowledge of Risk Management Framework (RMF) v5 (Processes, workflow, etc.).</li><li>
Ability to use eMASS to execute, RMF v5 to include document / update system status, identify, document, and manage implementation of operational and technical security controls, implementation and risk assessment tabs, non-compliant and non-validated controls, POAM management (entry, evidence, close-out), produce report and track Plan of Action and Milestone (POA&amp;M) due dates, etc.</li><li>
The ability to complete a checklist to ensure Security Authorization Process documents are complete and comply with all guidance.</li><li>
Ability to work collaboratively with IT counterparts, communicate effectively (skilled in communicating complex technical information to non-technical audience) and coordinate STIG remediation with system administrators and developers.</li><li>
Ability to conduct risk assessments, monitor security Incidents and respond appropriately to Security Threats.</li><li>
Working understanding of network technology (includes knowledge of network protocols, TCP/IP), operating systems as well as the necessary security protocols, system details (Architecture, data flow, security cat, requirements, configuration management process/procedures, and user profile) firewalls, rules and configurations, intrusion detection tools and prevention systems, encryption techniques, Windows, Unix, and Linux) operating systems, along with other applications such as databases and web servers.</li><li>
Ability to execute tasks with little to no oversight or support as well as manage multiple, and at times, competing priorities without loss of productivity.</li><li>
Certifications: Active IAT Level II certification (CompTIA Security+ preferred).</li><li>
Security Clearance: Active Top Secret with SCI eligibility.</li><li>
Education: Bachelor&rsquo;s degree and 8+ years of experience, or Master&rsquo;s Degree and 6+ years of experience, or 3 years with PhD. A degree in one of the following fields of study is highly desired: Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, or Data Science. However, an additional 4 years of relevant experience or specialized training may be considered in lieu of Bachelor's degree.</li></ul><div>
 Desired Qualifications:</div><ul><li>
Certifications: CASP+, CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC.</li><li>
Experience transitioning from RMF v4 to v5.</li><li>
Basic understanding of identity and access management system capabilities and configuration.</li><li>
Experience with cloud computing platforms such as AWS and Azure.</li><li>
Experience with TASKORDS, OPORDS, etc.</li><li>
Experience leading Cybersecurity (ISSO &amp; ISSE) teams.</li></ul></div></div><div><h5 class="jobSectionHeader">
DETAILS</h5><div>
Target Salary Range: $112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</div><div>
Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</div><div>
Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.
</div>
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</div></div><div></div>

INFORMATION SYSTEMS SECURITY OFFICER

Paragon Technology Group

<div>
 
 
 Paragon is recruiting for a
 
 Security Engineer II
 
 to work on the PEO-T contract for USTRANSCOM.
 
 
 
 Security Engineer II provides technical support in the areas of vulnerability and risk assessment, network security, product evaluation, and security implementation. Understands Information Security Continuous Monitoring (ISCM) concepts, security automation, and risk dashboarding tools. Must adhere to USTRANSCOM processes and procedures to identify and respond to risk while supporting efficient, accurate Assessment &amp; Authorization (A&amp;A) reporting to facilitate ongoing authorizations, secure release deployments, modernizations, migrations, and overall security enhancements. A high-level of autonomy is required for this role. Capable of defining solution recommendations and working with management to improve efficiency in processes and procedures. Capable of communicating technical details effectively within their assigned Program Management Offices (PMOs), translating complex security risks into operational or business impact for leadership and non-technical stakeholders. Effective communication skills and willingness to collaborate with peers and management are critical to success. May be asked to provide supplementary support to additional PMOs within the contract purview.
 
 
 
 
 Tasks
 
 &nbsp;include, but are not limited to, the following:
 
 
 <ul>
 
 <li>
 Reviews evolving NIST requirements to support risk assessment activities associated with the affiliated system requirements and specifications (execution, mapping, and compliance tracking).&nbsp;
 </li>
 
 <li>
 Prepares detailed specifications from which cybersecurity deficiencies identified during risk assessment will be mitigated/remediated and conducts follow-up risk assessment to ensure proper secure coding practices and STIG/SRG implementation are being built-in/enforced to the greatest extent possible.&nbsp;
 </li>
 
 <li>
 Collaborates closely with government customers to develop appropriate POA&amp;Ms and support risk acceptance activities as needed to support risk management processes. Reviews evolving National Institute of Standards and Technology (NIST) requirements to support risk assessment activities associated with the affiliated system requirements and specifications (execution, mapping, and compliance tracking).
 </li>
 
 <li>
 Prepares detailed specifications from which cybersecurity deficiencies identified during risk assessment will be mitigated/remediated and conducts follow-up risk assessment to ensure proper secure coding practices and Security Technical Implementation Guide&nbsp;(STIG)/Security Requirements Guide (SRG) implementation are being built-in/enforced to the greatest extent possible.&nbsp;
 </li>
 
 <li>
 Collaborate closely with government customers to develop appropriate Plan of Action and Milestones (POA&amp;Ms) and support risk acceptance activities as needed to support risk management processes.
 </li>
 
 <li>
 Responsible for designing and implementing solutions for protecting confidentiality, integrity, and availability of sensitive information.
 </li>
 
 <li>
 Provides technical evaluations of IT systems and assists with making security improvements.
 </li>
 
 <li>
 Participates in design of information system contingency plans that maintain appropriate levels of protection and meet time requirements for minimizing operations impact to customer organization.
 </li>
 
 <li>
 Conducts security product evaluations, and recommends products, technologies and upgrades to improve the organization&rsquo;s security posture.
 </li>
 
 <li>
 Conduct testing and audit log reviews to evaluate the effectiveness of current security measures.
 </li>
 
 <li>
 Participates in team initiatives including the drafting of deliverables and peer reviews of others&rsquo; products.
 </li>
 
 </ul>
 
 
 
 Qualifications:
 
 
 
 <ul>
 
 <li>
 Experience developing/reviewing system authorization documentation (family plans and supplementary artifacts) in accordance with Department of War (DoW) implementation of the Risk Management Framework (RMF)
 </li>
 
 <li>
 Experience participating in Technical Interchange Meetings (TIMs) on a wide range of Program Management Office (PMO) security engineering topics
 </li>
 
 <li>
 Experience participating in acquisition program engineering milestone reviews
 </li>
 
 <li>
 Experience coordinating and collaborating with Development contract personnel in Security, System Administration, System Engineering, and other supporting roles to identify, document, and plan for security enhancement requirements and to resolve program security issues&nbsp;
 </li>
 
 <li>
 Experience coordinating and collaborating with inheritance providers (e.g., enterprise teams in USTRANSCOM, Surface Deployment and Distribution Command [SDDC], Air Mobility Command [AMC], Defense Information Systems Agency [DISA] Security Office, etc.) to determine hybrid security requirements and established appropriate inheritance relationships using tools provided
 </li>
 
 <li>
 Experience performing security activities to maintain authorization of PMO programs (e.g., categorization, control selection, evidence collection and audit, risk assessments, reporting, security impact assessments affiliated with change management practices, Incident Response (IR)/Contingency Plan (CP) Exercise Support, Federal Information Security Management Act (FISMA) Reporting, Continuous Monitoring, etc.)
 </li>
 
 <li>
 Experience using DoW Enterprise Mission Assurance Support Service (eMASS) system&nbsp;
 </li>
 
 <li>
 Experience providing support to ensure PMO systems are designed, developed, and deployed in accordance with applicable Executive Orders, Federal Policy, DoW regulations, USTRANSCOM requirements, and commercial best practice
 </li>
 
 <li>
 Experience reviewing vulnerability scans using Assured Compliance Assessment Solution (ACAS)/Nessus, analyzing outputs to identify vulnerabilities, recommending mitigation and remediation actions, ingest actions in eMASS
 </li>
 
 <li>
 Experience supporting the Government Customer through critical review of documented DISA STIGs/SRGs, providing technical feedback and recommendations to customer for areas of improvement in reporting accurate qualitative results, and ingesting final product in the government-supplied tool to support risk assessment of the NIST controls.
 </li>
 
 <li>
 Experience generating, sustaining, extending (when appropriate), and reporting status associated with POA&amp;M requirements
 </li>
 
 <li>
 Experience conducting and evaluating security testing activities including security assessments and audits
 </li>
 
 <li>
 Experience supporting operational security activities (e.g., risk mitigation, host security, encryption, intrusion detection, Virtual Private Network [VPN] implementations, and viral detections)
 </li>
 
 <li>
 Experience with security lockdown and/or hardening of servers and network devices
 </li>
 
 <li>
 Ability to coordinate overall security strategy with multiple agencies, Authorizing Official (AO) representatives
 </li>
 
 <li>
 Ability to coordinate with developers, vendors, and other government organizations/agencies to assess security engineering issues
 </li>
 
 <li>
 Experience recommending changes to network and security architecture to improve security posture and meet operational performance requirements
 </li>
 
 </ul>
 
 
 
 Required Education/Certification
 
 
 
 <ul>
 
 <li>
 Must be a US Citizen with an active DoW Secret, or higher, clearance
 </li>
 
 <li>
 Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or equivalent Information Technology academic studies
 </li>
 
 <li>
 Active IAM II Certification in Good Standing (e.g., ISC2 CGRC [formerly CAP], CompTIA Security X [formerly CASP+CE], ISACA CISM, ISC2 CISSP (or associate), GIAC GSLC, EC-Council CCISO)
 </li>
 
 <li>
 1+ years of Security Engineering experience as Information Systems Security Officer (ISSO), Information Systems Security Manager (ISSM), Security Controls Assessor (SCA), Cyber Security Analyst/Engineer
 </li>
 
 </ul>
 
 
 
 
 
 
 
 What Success Looks Like
 
 
 
 
 Success in this role is demonstrated by clearly defined, traceable requirements that reflect validated operational needs; well-facilitated stakeholder forums that drive timely decisions; and functional designs that enable development teams to deliver compliant, mission-aligned capabilities. The Analyst is trusted by government leadership as a reliable integrator across Services, Agencies, and functional domains.
 
 
 
 
 How the Work Gets Done at Paragon
 
 
 
 
 At Paragon, work is executed through disciplined collaboration, accountability to mission outcomes, and respect for government processes. Analysts lead with preparation and clarity, facilitate structured decision-making forums, and ensure requirements are governed, documented, and traceable from operational need through delivery. The focus is on predictable execution, transparency, and stewardship of government resources.
 
 
 
 
 Working Conditions
 
 
 
 
 Work is primarily performed in a professional office or government facility environment.
 
 
 
 Position may require participation in classified discussions consistent with clearance level.
 
 
 
 Collaboration with geographically dispersed stakeholders is expected.
 
 
 
 Standard business hours with occasional schedule flexibility to support mission needs.
 
 
 
 
 Why Paragon
 
 
 
 
 Paragon Technology Group delivers mission-critical outcomes through disciplined execution, professional accountability, and respect for the trust placed in us by our government partners. Team members are empowered to own their work, contribute meaningfully to national defense missions, and operate in an environment that values clarity, predictability, and long-term stewardship.
 
</div>

Security Engineer II

DCS Corp

<div><div>DCS Corp is seeking a Senior Information Systems Security Officer (ISSO) to support our customer at Nellis AFB, NV.
****This is a temporary position expected to last approximately 26 weeks, though the assignment may conclude sooner based on contract or customer needs.****
Essential Job Functions:
Ensure the confidentiality, integrity, and availability of classified Information Systems (IS) and data using Air Force Approved network engineering, information security standards and approved industry best practices.
Perform upgrades, security patches, back-ups, account maintenance, and access control maintenance.
Assist the customer with developing and sustaining enterprise Risk Management Framework (RMF) accreditation packages.
Providing Information System Security Operations support, integration services, technical assessments, and solutions to enable cybersecurity.
Apply Secure Technical Implementation Guide (STIG) best practices to classified and unclassified. information systems, networking equipment, and applicable software and applications.
Perform vulnerability risk assessment analysis to support authorization and accreditation.
Assist customer preparing and reviewing documentation to include System Security Plans (SSPs), Risk Assessment Reports, Authorization to Operate (ATO) packages, policies, and Security Controls. Traceability Matrices (SCTMs) and upload documents into eMASS or other databases.
Conduct periodic reviews and evaluations of required IS policies and procedures.
Support IS Security inspections, tests, and reviews.
Perform generation and collection of audit logs for IS.
Required Skills:
Due to the sensitivity of customer related requirements, US Citizenship is required.
A BS Degree in Computer Science or relevant field with at least 12 years of work experience.
Current Secret Clearance.
Must be compliant with DoD 8140.03 with CASP or CISSP certification.
Desired Skills:
Demonstrated Cybersecurity Analyst foundation with strong working knowledge and understanding of Cyber technologies, RMF process.
Strong foundation and working knowledge with Nessus, SCAP Compliance Checker, STIGs, ACAS, eMASS, hardening systems and applying IA controls.
Excellent verbal and written communication skills along with customer interaction and presentation capabilities required.
Familiarity with DoD system security accreditation processes and tools.
Experience as a Unix System Administrator, Cisco Network Administrator or Windows System Administrator background.</div></div>

Information Security Systems Officer

Kratos Defense

<div>Job Description: 
Readiness Delivered. At Kratos, we encourage an entrepreneurial spirit balanced with discipline. We work hard, and take care of our customers, employees, and families. Recognized as thought leaders in our industry, we are motivated by creating and delivering innovative solutions to our nation and global customers.
Kratos is looking for an ISSO to support the Information Assurance (IA) development and sustainment of assigned systems and to serve as a security support element for technical teams. This is accomplished in compliance with CMMC and Risk Management Framework (RMF) policies and procedures, including the development of System Security Plans (SSP), Risk Assessment Reports (RAR), Plans of Action and Milestones (POA&amp;M), and Security Control Traceability Matrices (SCTM). The ISSO maintains the operational security posture to ensure that security policies, standards, and procedures are followed throughout the system lifecycle. Additionally, the ISSO supports vulnerability and risk assessment analysis to achieve and sustain Authorization to Operate (ATO) and ensures information system security requirements are integrated into configuration management for software, hardware, and firmware.
This position is based on multiple DoD Directives; including DoD 5205.07 volumes 1-4; DoDD 5205.02E; DoDI 5025.01, 5205.11, 5200.39, 5220.22, DoDM 3305.13; DoD 8140 series; Intelligence Community Directive Series 500/600/700; NIST 800 series special publications; Executive Orders 13556 and 13636, the Joint Special Access Program Implementation Guide Rev 4, and DISA Security Technical Implementation Guides.
Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. U.S. citizenship is required. Travel to customer sites and other program locations may be required.
Primary Responsibilities:
<ul><li>Perform security assessments such as vulnerability and compliance assessments, threat analysis, security code reviews, and risk assessments to identify potential design and implementation vulnerabilities.</li><li>
Participate in regular security self-inspections and audits.</li><li>
Assist with the selection and implementation of security controls and features for systems and applications.</li><li>
Identify new security features and recommend updates to existing products to ensure security is maintained throughout the product lifecycle.</li><li>
Perform security assessments on new and proposed products and technologies to ensure secure integration into the approved baseline.</li><li>
Provide product security engineering support and recommendations used to resolve integration and testing issues.</li><li>
Create and refine standard RMF Body-of-Evidence artifacts.</li><li>
Maintain a standardized set of security product requirements and produce metrics to report performance against those requirements.</li><li>
Review and define security diagnostics and tools to facilitate the analysis and reporting of security events.</li><li>
Assist other teams with mitigating security risks, responding to product security incidents, and product security related issues.</li><li>
Participate in security architecture and design review meetings.</li><li>
Manage system access and revocation requests. Track and verify DoD certification requirements in accordance with DoD 8140 guidance.</li></ul> 

Experience and Skills:<ul><li>
Solid knowledge of the DISA/DoD Risk Management Framework.</li><li>
CompTIA Security+ CE, CASP+, or equivalent cybersecurity certification.</li><li>
Experience with security controls, RMF, and STIGs.</li><li>
Familiarity with modern IT infrastructure capabilities to include virtualization, cloud deployment, and containerization.</li><li>
Self-motivated and comfortable with supporting multiple groups of developers, engineers, test, and deployment.</li><li>
Able to clearly communicate technical concepts orally and in written forms to internal and external audiences with technical and non-technical backgrounds.</li><li>
Capable of working in a fast-paced team environment.</li><li>
Excellent organizational and communication skills and able to effectively interact with managers and technical staff.</li><li>
A strong familiarity with cloud technologies and compliance requirements for cloud</li><li>
Top Secret clearance with SCI eligibility required. Candidates with Special Access Program (SAP) experience are highly valued.</li></ul>
Preferred Skills and Experience<ul><li>
2 years as an ISSO or equivalent duties.</li><li>
Familiarity with eMASS, XACTA, or similar government systems of record.</li><li>
Familiarity with Zero Trust Architecture (ZTA) requirements.</li><li>
Experience with Windows and RHEL environments.</li><li>
Experience with AWS.</li><li>
Experience with security tools such in the following areas: Malicious code prevention and analysis (i.e., Trellix), Audit log analysis (Splunk, Greylog, etc.), Patch Management and Vulnerability Analysis (Tenable Security Suite &amp; ACAS), and security tools which support the implementation of DISA STIGs (SCC, Evaluate STIG, STIG Viewer, etc.).</li></ul>
#LI-Onsite
The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge, and skills.
Competitive salary based on experience and education 
Salary Range: $110,000-$140,000
Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings-from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.
This posting will close within 90 days from the Posting Date.
 
Job Benefits:<ul><li>
Medical, Dental &amp; Vision Insurance Coverage</li><li>
Life/ADD &amp; Short/Long Term Disability Insurance</li><li>
401(k) Savings Plan</li><li>
Employee Stock Purchase Plan (ESPP)</li><li>
Paid Time-Off (PTO)</li><li>
Holidays</li><li>
Education Reimbursement</li></ul> 
Kratos Defense is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.
Disability Accessibility Accommodation 
If you require an accommodation to navigate or apply to our careers site, please send your request to HRAccessibility@kratosdefense.com or call 858-964-2916. Any inquires not related to requesting an accommodation will be discarded.
Pay Transparency 
The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.
Job Applicant Privacy Notice 
For applicants in the EU and California residents, please review our privacy notice. 
 
 
 
From: Kratos Defense</div>

Information System Security Officer

البنك التجاري الدولي

<div></div><div><div>Description<div></div> 
1. Ensure proper management of the Information Security Controls and Governance resources to support ongoing business initiatives from a security controls and governance perspectives, ensuring the development of the necessary security access matrix mapped to the staff&rsquo;s job titles and business activities.

2. Develop and Monitor the Information Security Controls and Governance Area&rsquo;s Key Performance Indicators and ensure adherence to the same. This includes monitoring of the TAT and SLAs of handling the different access management requests. In addition to the KPIs &amp; KRIs related to the Security Controls periodic reviews and assessments.

3. Ensure the annual review and update of the Information Security Controls and Governance area processes and procedures with the development and adherence to the developed SLAs.

4. Manage and oversee the implementation of the Data Classification &amp; Protection program to ensure proper classification framework is defined that helps classify and protect the bank&rsquo;s crown jewels and critical information assets. This includes maintaining the controls necessary to protect information and vital assets in accordance with security requirements and industry standards (privacy requirements, Personal Identifiable Information, encryption, Data Loss Prevention, data retention and destruction) for both structured and unstructured data.
5. Ensure proper timely tracking and closure of open (internal/External) audit issues.

6. Manage and oversee the Identity Access Management and Governance program to ensure proper governance of identities during the employment life cycle of all personnel in accordance with the security requirements and policies. including the development of the applications&rsquo; security matrix.

7. Manage and oversee the implementation of the Security Controls and Governance roadmap to ensure the planned reviews are conducted as per the predefined frequencies as well as the closure of the identified gaps in a timely manner, and ensure conducting access rights certification campaigns over the different bank systems to validate current access rights granted to employees, and ensure proper enforcements of actions identified as an outcome of the campaigns.

8. Handle and manage exceptions and escalations to ensure proper support and alignment is in place between Information Security Controls and Governance area and the different stakeholders. This includes resolving communication conflicts to ensure a streamlined process is in place.

9. Work collaboratively with Business units, IT teams, Audit, Legal and risk management functions to address open gaps/issues driven from internal/external audit, independent assessments and reviews as applicable, and ensure proper tracking mechanism is in place in coordination with the relevant stakeholders.

10. Ensure proper enforcement of the developed security policies and controls including Physical and Environmental Security policy, Human Resources Security Policy, Information Governance Policy. This in addition to the URL Filtering, Internet Access Policies as well as the Data Loss Prevention Policies.

11. Ensure adherence to the defined security controls operating model to support the different security controls requirements and communicate violations to the relevant teams. This includes managing the different security controls approvals including (Removable media access, Remote Working Access, Internet Access, External Email Access, EMM, etc..) ensuring adherence to the set SLAs and TAT.

12. Assess and take the necessary actions towards the different policies&rsquo; violations identified through the Privileged Access Management, Security Monitoring Tools such as NexThink, DLP or through the on-going SOC monitoring and reporting.<div> 
</div></div><div>
Qualifications<div></div> 
Qualifications &amp; Experience

 Bachelor&rsquo;s degree of Engineering, Computer Science, Information Security or equivalent.

 Minimum 8 - 10 years of experience in IT, Information Security, Risk Analysis and / or Governance and Compliance

 Recommended Certifications

o SANS Global Information Assurance Certification (GIAC)

o CRISC

o ISO 27001:2013 Lead implementer
o CISM

Skills

 Very good command of English and Arabic languages

 Very good Management and leadership skills
 Very good Negotiation skills

 Excellent Communication skills<div> 
</div></div><div>
Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 3</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div><div>
Travel: No</div></div>

INFORMATION SECURITY CONTROLS & GOVERNANCE MANAGER

APS Smart Solutions LLC

Job Title: Cybersecurity ManagerProtect Critical Systems. Lead Security Strategy. Build a Safer Digital Future.APS Smart Solutions LLC is looking for an experienced Cybersecurity Manager to lead and strengthen our enterprise security posture across cloud, network, and application environments. This is a high-impact role where you will directly shape security strategy, incident response, and risk management for modern digital infrastructure projects across the region.If you are passionate about defending systems, building resilient architectures, and leading security teams&mdash;this is your opportunity to take ownership of enterprise-level cybersecurity operations in a growing technology-driven company.What You&rsquo;ll Be Doing<ul><li>Lead the design and execution of cybersecurity strategies across enterprise systems</li><li>Monitor, detect, and respond to security threats, vulnerabilities, and incidents</li><li>Implement security frameworks (ISO 27001, NIST, CIS Controls)</li><li>Conduct risk assessments and penetration testing coordination</li><li>Oversee firewall, SIEM, IDS/IPS, and endpoint protection systems</li><li>Manage incident response plans and security escalation procedures</li><li>Collaborate with IT, DevOps, and cloud teams to enforce secure architecture</li><li>Ensure compliance with regulatory and data protection standards</li><li>Train internal teams on cybersecurity awareness and best practices</li></ul>What We&rsquo;re Looking For<ul><li>5+ years of experience in cybersecurity, IT security, or information security roles</li><li>Strong knowledge of network security, cloud security (AWS/Azure), and enterprise systems</li><li>Experience with SIEM tools, firewalls, and threat detection systems</li><li>Familiarity with security frameworks (ISO 27001, NIST, CIS)</li><li>Strong incident response and risk management skills</li><li>Relevant certifications preferred (CISSP, CISM, CEH, CompTIA Security+)</li><li>Ability to lead teams and communicate security risks clearly</li></ul>What We Offer<ul><li>Competitive salary package based on experience</li><li>Career growth into senior leadership / Head of Security roles</li><li>Exposure to large-scale enterprise and cloud environments</li><li>Supportive and innovation-driven work environment</li><li>Ongoing professional development opportunities</li></ul>About APS Smart Solutions LLCAPS Smart Solutions LLC is a technology-driven company specializing in smart infrastructure, cybersecurity, cloud solutions, and enterprise IT services. We help organizations modernize their systems, secure digital environments, and scale operations efficiently across the Middle East.Why Work With UsAt APS Smart Solutions LLC, you won&rsquo;t just maintain security&mdash;you&rsquo;ll build it. We value innovation, technical excellence, and leadership. This role gives you the opportunity to directly influence security strategy at a growing organization where your expertise truly matters.Apply NowIf you're ready to take the lead in protecting enterprise systems and advancing your cybersecurity career, we encourage you to apply today.Pay: KD1,800.000 - KD3,200.000 per monthWork Location: In person

Cybersecurity Manager

Search 10000+ Information systems security manager jobs near you this May. New roles added regularly across leading industries. Apply today.