risk management framework specialist

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton has an opening for an Information Systems Security Officer (ISSO) with a proven track record of DevSecOps success to include a combination of technical skills, communication skills, and cybersecurity skills. The successful candidate will be responsible for ensuring the implementation and maintenance of security controls in accordance with RMF v5, managing ATO packages, drafting security documentation including Operating Procedures, Cybersecurity Strategy (CSS), System Security Plans (SSP) ATO packages as well as System Security and Privacy Plan (SSPP) in accordance with DoD policies, Department of Airforce (DAF) regulations and our Federal Government customer's guidance.</div><div></div><div><br>
The candidate must have expert knowledge and demonstrated experience with cybersecurity technologies, risk management, and incident response procedures as well as have a solid working understanding of computer functions, including hardware, software, and operating systems. This includes knowledge of Windows, Unix, and Linux operating systems, along with other applications such as databases, web servers, networking technologies, including routing, switching, and VPNs. It&rsquo;s a bonus if the candidate has experience with cloud computing platforms such as AWS and Azure.</div><div></div><div><br>
The ISSO must be able to work autonomously, manage their workload effectively, shift priorities with little to no loss of productivity and communicate effectively with technical and non-technical personnel.</div><div></div><ul><li><br>
<i>This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area.</i></li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><div>
Required Qualifications:</div><ul><li>
Well-versed in best practices for cyber security program standards, processes, and procedures compliance, industry-standard security frameworks and demonstrated expert working knowledge of NIST Special Publication (SP) 800-53: Recommended Security Controls for Federal Information Systems, NIST SP 800-53A: Guide for Assessing the Security Controls in Federal Information Systems, AFPD 17-1 and AFI 17-130, Cybersecurity Program Management.</li><li>
Ability writing security policies and procedures, CSS, SSP, SSPP, and assess all ATO package artifacts.</li><li>
Expert knowledge of Risk Management Framework (RMF) v5 (Processes, workflow, etc.).</li><li>
Ability to use eMASS to execute, RMF v5 to include document / update system status, identify, document, and manage implementation of operational and technical security controls, implementation and risk assessment tabs, non-compliant and non-validated controls, POAM management (entry, evidence, close-out), produce report and track Plan of Action and Milestone (POA&amp;M) due dates, etc.</li><li>
The ability to complete a checklist to ensure Security Authorization Process documents are complete and comply with all guidance.</li><li>
Ability to work collaboratively with IT counterparts, communicate effectively (skilled in communicating complex technical information to non-technical audience) and coordinate STIG remediation with system administrators and developers.</li><li>
Ability to conduct risk assessments, monitor security Incidents and respond appropriately to Security Threats.</li><li>
Working understanding of network technology (includes knowledge of network protocols, TCP/IP), operating systems as well as the necessary security protocols, system details (Architecture, data flow, security cat, requirements, configuration management process/procedures, and user profile) firewalls, rules and configurations, intrusion detection tools and prevention systems, encryption techniques, Windows, Unix, and Linux) operating systems, along with other applications such as databases and web servers.</li><li>
Ability to execute tasks with little to no oversight or support as well as manage multiple, and at times, competing priorities without loss of productivity.</li><li><b>
Certifications:</b> Active IAT Level II certification (CompTIA Security+ preferred).</li><li><b>
Security Clearance:</b> Active Top Secret with SCI eligibility.</li><li><b>
Education:</b> Bachelor&rsquo;s degree and 8+ years of experience, or Master&rsquo;s Degree and 6+ years of experience, or 3 years with PhD. A degree in one of the following fields of study is highly desired: Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, or Data Science. However, an additional 4 years of relevant experience or specialized training may be considered in lieu of Bachelor's degree.</li></ul><div>
 Desired Qualifications:</div><ul><li>
Certifications: CASP+, CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC.</li><li>
Experience transitioning from RMF v4 to v5.</li><li>
Basic understanding of identity and access management system capabilities and configuration.</li><li>
Experience with cloud computing platforms such as AWS and Azure.</li><li>
Experience with TASKORDS, OPORDS, etc.</li><li>
Experience leading Cybersecurity (ISSO &amp; ISSE) teams.</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p>
<b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Statements:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

INFORMATION SYSTEMS SECURITY OFFICER

Kratos Defense

<div><b>Job Description:</b><p><b><br>
Readiness Delivered.</b> At Kratos, we encourage an entrepreneurial spirit balanced with discipline. We work hard, and take care of our customers, employees, and families. Recognized as thought leaders in our industry, we are motivated by creating and delivering innovative solutions to our nation and global customers.
</p><p>Kratos is looking for an<b> ISSO</b> to support the Information Assurance (IA) development and sustainment of assigned systems and to serve as a security support element for technical teams. This is accomplished in compliance with CMMC and Risk Management Framework (RMF) policies and procedures, including the development of System Security Plans (SSP), Risk Assessment Reports (RAR), Plans of Action and Milestones (POA&amp;M), and Security Control Traceability Matrices (SCTM). The ISSO maintains the operational security posture to ensure that security policies, standards, and procedures are followed throughout the system lifecycle. Additionally, the ISSO supports vulnerability and risk assessment analysis to achieve and sustain Authorization to Operate (ATO) and ensures information system security requirements are integrated into configuration management for software, hardware, and firmware.
</p><p>This position is based on multiple DoD Directives; including DoD 5205.07 volumes 1-4; DoDD 5205.02E; DoDI 5025.01, 5205.11, 5200.39, 5220.22, DoDM 3305.13; DoD 8140 series; Intelligence Community Directive Series 500/600/700; NIST 800 series special publications; Executive Orders 13556 and 13636, the Joint Special Access Program Implementation Guide Rev 4, and DISA Security Technical Implementation Guides.
</p><p>Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. U.S. citizenship is required. Travel to customer sites and other program locations may be required.
</p><p>Primary Responsibilities:
</p><ul><li>Perform security assessments such as vulnerability and compliance assessments, threat analysis, security code reviews, and risk assessments to identify potential design and implementation vulnerabilities.</li><li>
Participate in regular security self-inspections and audits.</li><li>
Assist with the selection and implementation of security controls and features for systems and applications.</li><li>
Identify new security features and recommend updates to existing products to ensure security is maintained throughout the product lifecycle.</li><li>
Perform security assessments on new and proposed products and technologies to ensure secure integration into the approved baseline.</li><li>
Provide product security engineering support and recommendations used to resolve integration and testing issues.</li><li>
Create and refine standard RMF Body-of-Evidence artifacts.</li><li>
Maintain a standardized set of security product requirements and produce metrics to report performance against those requirements.</li><li>
Review and define security diagnostics and tools to facilitate the analysis and reporting of security events.</li><li>
Assist other teams with mitigating security risks, responding to product security incidents, and product security related issues.</li><li>
Participate in security architecture and design review meetings.</li><li>
Manage system access and revocation requests. Track and verify DoD certification requirements in accordance with DoD 8140 guidance.</li></ul><br>
<b>
Experience and Skills:</b><ul><li>
Solid knowledge of the <b>DISA/DoD Risk Management Framework</b>.</li><li>
CompTIA <b>Security+ CE, CASP+</b>, or equivalent cybersecurity certification.</li><li>
Experience with <b>security controls, RMF, and STIGs</b>.</li><li>
Familiarity with modern IT infrastructure capabilities to include virtualization, cloud deployment, and containerization.</li><li>
Self-motivated and comfortable with supporting multiple groups of developers, engineers, test, and deployment.</li><li>
Able to clearly communicate technical concepts orally and in written forms to internal and external audiences with technical and non-technical backgrounds.</li><li>
Capable of working in a fast-paced team environment.</li><li>
Excellent organizational and communication skills and able to effectively interact with managers and technical staff.</li><li>
A strong familiarity with cloud technologies and compliance requirements for cloud</li><li><b>
Top Secret clearance with SCI</b> eligibility required. Candidates with Special Access Program (SAP) experience are highly valued.</li></ul><p><b>
Preferred Skills and Experience</b></p><ul><li>
2 years as an ISSO or equivalent duties.</li><li>
Familiarity with eMASS, XACTA, or similar government systems of record.</li><li>
Familiarity with Zero Trust Architecture (ZTA) requirements.</li><li>
Experience with Windows and RHEL environments.</li><li>
Experience with AWS.</li><li>
Experience with security tools such in the following areas: Malicious code prevention and analysis (i.e., Trellix), Audit log analysis (Splunk, Greylog, etc.), Patch Management and Vulnerability Analysis (Tenable Security Suite &amp; ACAS), and security tools which support the implementation of DISA STIGs (SCC, Evaluate STIG, STIG Viewer, etc.).</li></ul><p><b>
#LI-Onsite</b></p><p><b>
The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge, and skills.
</b></p><p><i>Competitive salary based on experience and education</i><br>
<i>Salary Range: $110,000-$140,000</i></p><p>
Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings-from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.
</p><p><b>This posting will close within 90 days from the Posting Date.
</b><br>
<b>Job Benefits:</b></p><p></p><ul><li>
Medical, Dental &amp; Vision Insurance Coverage</li><li>
Life/ADD &amp; Short/Long Term Disability Insurance</li><li>
401(k) Savings Plan</li><li>
Employee Stock Purchase Plan (ESPP)</li><li>
Paid Time-Off (PTO)</li><li>
Holidays</li><li>
Education Reimbursement</li></ul><p><br>
Kratos Defense is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.
</p><p><b>Disability Accessibility Accommodation</b><br>
If you require an accommodation to navigate or apply to our careers site, please send your request to HRAccessibility@kratosdefense.com or call 858-964-2916. Any inquires not related to requesting an accommodation will be discarded.
</p><p><b>Pay Transparency</b><br>
The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.
</p><p><b>Job Applicant Privacy Notice</b><br>
For applicants in the EU and California residents, please review our privacy notice.<br>
<br>
<br>
<br>
From: Kratos Defense</p></div>

Information System Security Officer

<div><p>SMX is seeking an <b>Information System Security Manger (ISSM &ndash; SIGINT) </b>who will be tasked with managing and maintaining the security posture of SIGINT systems in accordance with the standards established by the National Security Agency (NSA), Department of Defense (DoD), and Intelligence Community (IC). This role involves continuous monitoring, management of security controls, validation of risk management documentation, and ensuring the prompt resolution of Plan of Action &amp; Milestones (POA&amp;M) items. The ISSM&ndash;SIGINT collaborates closely with stakeholders to ensure system compliance, supports incident reporting and response efforts, and offers guidance to other ISSOs on policies and procedures. This senior position demands technical expertise, leadership skills, and a comprehensive understanding of NSA security frameworks, processes, and tools.</p>
<p><b>
This is a full-time onsite position in Ft. Belvoir, VA.</b></p>
<p><b>
Essential Duties &amp; Responsibilities</b></p>
<p>
Continuous Monitoring and System Management</p>
<ul>
<li>Implement ongoing monitoring activities to ensure adherence to NSA standards and timelines (120-100 days of ATD).</li>
<li>Validate and refresh self-test security controls, diagrams, hardware and software inventories, and security scans in CyborgBunny.</li>
<li>Ensure that RMF documents (e.g., Incident Response, Contingency, Configuration, and Disaster Recovery Plans) are updated every 12 to 18 months.</li>
<li>Monitor and review User Activity Monitoring (UAM) activities through SEAR, ensuring that System Security Plans (SSPs) and CONOPS are updated annually.</li>
<li>Address discrepancies in the IGGY system and prepare readiness reports for review by the DAO.</li>
</ul>
<p>POA&amp;M and Vulnerability Management</p>
<ul>
<li>Track, update, and resolve POA&amp;Ms to ensure compliance with NSA and IC policies.</li>
<li>Manage extension requests for expiring POA&amp;Ms and systems requiring DAO decisions.</li>
<li>Collaborate with ISSOs to confirm that expired POA&amp;Ms are either resolved or extended, with DAO approval.</li>
</ul>
<p>Incident Response and Alert Management</p>
<ul>
<li>Respond to Computer Security Incident Reports (CSIRs) through FREEZFRAME or email within three business days and follow up weekly while escalating any unresolved cases.</li>
<li>Review alerts in LATTEART and collaborate with ISSOs to address system health scores in accordance with NSA requirements.</li>
</ul>
<p>System Approvals and Decommissioning</p>
<ul>
<li>Review and approve IAVA POA&amp;M items, Staffing Processing Forms (SPFs), CIVET tickets, and DTA ticket requests for systems lacking an O-ISSM.</li>
<li>Manage decommission requests in XACTA and ensure that extensions are thoroughly documented.</li>
</ul>
<p>Policy Guidance and Collaboration</p>
<ul>
<li>Offer guidance to ISSOs regarding policy, procedures, and updates to NSA standards.</li>
<li>Assist system owners and ISSOs in maintaining compliance with mandatory training, iAgree forms, and other security requirements.</li>
</ul>
<p>Stakeholder Communication and Reporting</p>
<ul>
<li>Maintain communication with System Owners, ISSOs, and DAOs to ensure system readiness and compliance.</li>
<li>Participate in meetings, fulfill ad hoc tasks, and provide written status reports as needed.</li>
<li>Review the DARKROAST, ROCBLASTER, XACTA, NESBER and other related systems for inquiries related to newly registered systems or assets.</li>
</ul>
<p>Automation and Process Optimization</p>
<ul>
<li>Identify and evaluate solutions for automating cybersecurity analysis tasks to enhance efficiency and accuracy.</li>
</ul>
<p><b>Required Skills, Experience &amp; Education</b></p>
<ul>
<li>Active TS security clearance and eligible for SCI and NATO read-on prior to starting work. Complete an active CI polygraph before commencing work.</li>
<li>PhD in Science, Technology, Engineering, or Mathematics (STEM) with over 15 years of experience in cybersecurity; a Master's degree in STEM with over 18 years of cybersecurity experience; or a Bachelor's degree in STEM with at least 20 years of experience in cybersecurity.</li>
<li>Capacity to obtain and maintain all required NSA access.</li>
<li>CISM or CISSO or FITSP-M or GCIA or GCSA or GCIH or GSLC or GICSP or CISSP-ISSMP or CISSP</li>
<li>Fifteen years of experience in assessment and accreditation activities for national security systems (NSS).</li>
<li>Ten years of experience in validating system security controls.</li>
<li>Ten years of experience managing vulnerabilities.</li>
<li>Eight years of experience implementing RMF.</li>
<li>Five years of experience in POA&amp;M tracking and resolution.</li>
<li>Three years of experience in continuous monitoring of system security controls.</li>
</ul>
<p>Key Competencies:</p>
<ul>
<li>Technical Expertise: Proficient in NSA-specific tools and processes such as CyborgBunny, Biscotti, SEAR, and XACTA.</li>
<li>Risk Management: Demonstrated ability to track and resolve POA&amp;M items and assess risks associated with national security systems.</li>
<li>Communication and Reporting: Excellent written and verbal communication skills for stakeholder engagement, incident reporting, and system readiness updates.</li>
<li>Leadership and Guidance: Strong ability to mentor and support ISSOs in implementing cybersecurity policies and procedures.</li>
<li>Problem-Solving: Expertise in resolving system discrepancies and escalating unresolved incidents efficiently.</li>
<li>Collaboration: Works effectively with system owners, ISSOs, DAOs, and other stakeholders to maintain system compliance and readiness.</li>
<li>Attention to Detail: Meticulous in tracking, documenting, and reporting security activities to ensure compliance with NSA and IC standards.</li>
<li>Adaptability: Capable of staying current with evolving NSA standards, tools, and cybersecurity threats.</li>
</ul>
<p><b>Desired Skills/Experience/Certifications</b></p>
<ul>
<li>5 years of experience performing RMF functions under NSA guidance.</li>
<li>5 years of ISSM or ISSO experience using XACTA.</li>
<li>Experience with NSA-specific tools such as Biscotti, SEAR, IGGY, and LATTEART.</li>
<li>Certified Authorization Professional (CAP)</li>
<li>Certified Information Security Manager (CISM)</li></ul><br>
<p></p>
<p>
Application Deadline: July 13, 2026</p>
<p>
#CJPOST</p>
<p>
#LI-onsite</p><p></p><div><br>
<p>
At SMX&reg;, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.</p>
<p>
We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what's possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.</p>
<p>
SMX is an Equal Opportunity employer including disabilities and veterans.</p>
<p></p>
<div></div><p>Selected applicant may be subject to a background investigation and/or education verification.</p>
<p>
SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).</p></div></div>

Information System Security Manager (SIGINT) (5268) (TS/SCI CI Poly) (Ft. Belvoir, VA )

Maaden

<div>
 <p>
  <strong>
   Maaden Brief:
  </strong>
 </p>
 <p>
  Maaden, established in 1997, is one of the fastest-growing mining companies in the world and the largest multi-commodity mining and metals company in the Middle East. We are leading the development of the mining industry to become the third pillar of Saudi Arabia&rsquo;s economy by building a world-class, unique, and fully integrated mining value chain.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Business Unit:
  </strong>
  Maaden Corporate
 </p>
 <p>
  <strong>
   Function:
  </strong>
  Legal &amp; RC
 </p>
 <p>
  <strong>
   Job Location:
  </strong>
  Riyadh
 </p>
 <p>
  <strong>
   Working hours:
  </strong>
  8 hours
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Purpose:
  </strong>
 </p>
 <p>
  The Principal Specialist, Compliance Monitoring is responsible for leading the design and execution of a comprehensive compliance monitoring program that ensures the organization meets its legal, regulatory, and internal policy obligations. This role plays a critical part in safeguarding Maaden&rsquo;s integrity by proactively identifying compliance risks, overseeing monitoring activities, and ensuring timely reporting and remediation.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Through the application of advanced compliance methodologies and cross-functional collaboration, the role ensures that monitoring efforts are risk-based, data-driven, and aligned with the company&rsquo;s governance framework. The Principal Specialist serves as a subject matter expert, translating complex regulatory requirements into actionable insights and controls that support informed decision-making and continuous improvement.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Accountabilities:
  </strong>
 </p>
 <ul>
  <li>
   Design and implement a risk-based compliance monitoring framework that addresses obligations of varying impact levels, ensuring alignment with regulatory expectations and internal governance standards.
  </li>
  <li>
   Lead and execute periodic compliance reviews and thematic audits to evaluate adherence to applicable laws, regulations, and internal policies, identifying trends and areas for improvement.
  </li>
  <li>
   Maintain and continuously update the compliance obligations register, ensuring timely reflection of regulatory changes and internal policy updates.
  </li>
  <li>
   Engage proactively with internal stakeholders to identify, assess, and remediate compliance gaps, driving timely corrective actions and fostering a culture of accountability.
  </li>
  <li>
   Prepare and deliver high-quality compliance reports and dashboards for senior leadership and regulatory authorities, providing insights on risk exposure, control effectiveness, and remediation progress.
  </li>
  <li>
   Ensure continuous monitoring and real-time reporting of compliance status, leveraging data analytics and compliance tools to support informed decision-making.
  </li>
  <li>
   Identify emerging compliance risks and lead the implementation of preventive and corrective measures, ensuring sustainable risk mitigation and operational integrity.
  </li>
  <li>
   Independently analyze compliance obligations using advanced knowledge of regulatory frameworks and compliance tools, ensuring accurate interpretation and application across business units.
  </li>
  <li>
   Interpret and operationalize legal and ethical guidelines by translating complex regulatory requirements into actionable internal policies, procedures, and controls.
  </li>
  <li>
   Design and implement a compliance monitoring framework using advanced regulatory tools and methodologies.
  </li>
  <li>
   Lead the compliance monitoring program by applying deep expertise in monitoring methodologies, ensuring continuous oversight, risk identification, and timely reporting to support regulatory readiness.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Minimum Qualifications, Experience:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor degree in relevant field . Master&rsquo;s degree will be an advantage.
  </li>
  <li>
   7+ years&rsquo; experience in compliance/legal in a
   <strong>
    similar type of organization
   </strong>
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Skills:
  </strong>
 </p>
 <ul>
  <li>
   Excellent oral, written and communication skills, including the ability to interact positively with a wide variety of individuals.
  </li>
  <li>
   High level of integrity, ethical conduct and trustworthiness.
  </li>
  <li>
   Deep understanding of ethics and investigations principles and practices.
  </li>
  <li>
   Proficiency in regulatory frameworks and compliance tools.
  </li>
  <li>
   Ability to interpret and apply legal and ethical guidelines.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Benefits:
  </strong>
 </p>
 <ul>
  <li>
   Career Growth
  </li>
  <li>
   Competitive Salaries
  </li>
  <li>
   Comprehensive Package
  </li>
  <li>
   Inclusive Work Environment
  </li>
  <li>
   Work-Life Balance
  </li>
  <li>
   Employee wellness
  </li>
 </ul>
</div>


Principal Specialist, Compliance Monitoring

Tamara

<div><h3 class="jobSectionHeader"><b>About Us</b></h3>
<p>
Tamara is the leading shopping and payments platform in Saudi Arabia and the GCC region, with a mission to empower people in their daily lives and revolutionize how they shop, pay, and bank. The company was founded by serial entrepreneur Abdulmajeed Alsukhan along with his partners Turki Bin Zarah and Abdulmohsen Al Babtain. Tamara operates out of its headquarters in Riyadh, Saudi Arabia, and has offices in the UAE, Egypt, Germany, and Vietnam. Our large, dedicated team of professionals continues to grow as we expand our reach and impact.</p>
<p>
Serving millions of users and partnering with thousands of merchants, Tamara collaborates with leading global and regional brands such as SHEIN, Jarir, noon, IKEA, H&amp;M, and Farfetch, as well as local small and medium businesses. The company is backed by SNB Capital and Sanabil Investments, a wholly-owned company by the Public Investment Fund (PIF), Checkout.com, Coatue, Shorooq Partners, and Endeavor Catalyst, among others.</p>
<h3 class="jobSectionHeader"><b>
Your Role</b></h3>
<p>
We&rsquo;re seeking a Counter Fraud Specialist to join our Fraud Risk Oversight team (Second Line of Defense).<br>
In this role, you will play a key part in establishing, enhancing, and maintaining Tamara&rsquo;s Fraud Framework in alignment with SAMA&rsquo;s Counter-Fraud Framework (CFF), ensuring governance, oversight, and compliance maturity across all internal and external fraud risk domains.</p>
<p>
You will contribute to developing fraud risk strategies by analyzing data, investigating internal fraud cases, and assessing control effectiveness across the organization. Drawing on your experience in data analysis (SQL) and exposure to fraud operations, you will support continuous improvements to Tamara&rsquo;s fraud prevention and detection environment.</p>
<p>
You will serve as a SAMA-facing subject matter expert, assisting in providing evidence, documentation, and responses to SAMA inquiries and ensuring full alignment with regulatory expectations. Your experience in working with or within Big Four consulting firms on fraud risk management frameworks will be valuable in building a robust and sustainable second-line function.</p>
<p>
You will collaborate closely with cross-functional stakeholders &mdash; including Fraud Operations, Compliance, Risk, and Internal Audit &mdash; to ensure consistent implementation of fraud governance requirements, effective remediation of identified risks, and transparent communication of key fraud indicators.</p>
<p>
You are driven, analytical, and solutions-oriented, comfortable working under pressure in a dynamic fintech environment. You thrive in data-driven environments, excel at detail-oriented tasks, and can shift seamlessly between strategic thinking and hands-on analysis.</p>
<h3 class="jobSectionHeader"><b>
Your Responsibilities</b></h3>
<ul><li>Support the development, implementation, and continuous enhancement of Tamara&rsquo;s Internal Fraud Framework, ensuring alignment with SAMA&rsquo;s Counter-Fraud Framework (CFF).</li>
<li>Analyze fraud and operational data to detect trends and control weaknesses &mdash; leveraging SQL and analytical tools to generate actionable insights.</li>
<li>Investigate internal fraud cases and perform deep-dive analyses into potential internal misconduct, collaborating with relevant stakeholders for resolution.</li>
<li>Assist in preparing evidence, documentation, and reports required by SAMA or internal governance bodies; serve as a SAMA-facing representative on fraud risk topics when needed.</li>
<li>Perform fraud risk assessments, control testing, and thematic reviews to evaluate the effectiveness of preventive and detective measures.</li>
<li>Draft, update, and maintain fraud risk policies and procedures.</li>
<li>Collaborate with Fraud Operations and other business lines to ensure accurate root cause analysis and remediation of fraud cases.</li>
<li>Contribute analytical input into the design and calibration of internal fraud detection/prevention and internal controls.</li>
<li>Monitor fraud and risk alerts daily related to internal fraud and take appropriate oversight actions to ensure operational teams act effectively and timely.</li>
<li>Identify emerging fraud patterns and work with control owners to implement risk mitigation measures.</li>
<li>Maintain proper documentation for all investigations, reviews, and control testing performed.</li><br>
</ul>
<p><b>Your Expertise</b></p>
<ul>
<li>4&ndash;7 years of experience in fraud risk management, internal fraud, or governance, preferably within a regulated financial institution or fintech.</li>
<li>Experience within or alongside Big Four consulting firms in establishing or assessing internal fraud frameworks aligned with SAMA CFF or similar regulatory standards.</li>
<li>Technical proficiency in SQL and comfort with analyzing large datasets.</li>
<li>Strong investigative and analytical skills with hands-on exposure to fraud operations and risk assessment.</li>
<li>Demonstrated experience in working with regulators (SAMA), preparing documentation, and ensuring full compliance and maturity against regulatory frameworks.</li>
<li>Strong collaboration and communication skills, with the ability to work cross-functionally and influence stakeholders.</li>
<li>Educational background in IT, Computer Engineering, Software Engineering, or another technical field preferred.</li>
<li>High attention to detail, structured thinking, and ability to work independently under minimal supervision.</li>
<li>Strong business judgment, discretion, and integrity when handling confidential and sensitive matters.</li>
</ul><h3 class="jobSectionHeader"><b>Join the revolution</b></h3>
<p>
Tamara is a vibrant hub of exceptional individuals worldwide, with over 40+ nationalities committed to working with the broadest talent pool possible. We're proud of the wealth of cultural backgrounds that shape our teams, ensuring every experience is acknowledged and celebrated.</p>
<p>
We seek self driven individuals, fuelled by curiosity, ready to take control of their professional and personal development. We&rsquo;re creating a place where possibilities are for the taking through career mobility, mentoring and cross-border collaboration. This approach has earned us a spot as one of the competitive tech companies to work for.</p>
<p>
All qualified individuals are encouraged to apply.To learn more about how we protect your privacy, please visit our Candidate privacy notice.</p></div>

Fraud Analyst (Counter Fraud Specialist)

<div>
 <strong>
  About Us
  <br/>
  <br/>
 </strong>
 Tamara is the leading shopping and payments platform in Saudi Arabia and the GCC region, with a mission to empower people in their daily lives and revolutionize how they shop, pay, and bank. The company was founded by serial entrepreneur Abdulmajeed Alsukhan along with his partners Turki Bin Zarah and Abdulmohsen Al Babtain. Tamara operates out of its headquarters in Riyadh, Saudi Arabia, and has offices in the UAE, Egypt, Germany, and Vietnam. Our large, dedicated team of professionals continues to grow as we expand our reach and impact.
 <br/>
 <br/>
 Serving millions of users and partnering with thousands of merchants, Tamara collaborates with leading global and regional brands such as SHEIN, Jarir, noon, IKEA, H&amp;M, and Farfetch, as well as local small and medium businesses. The company is backed by SNB Capital and Sanabil Investments, a wholly-owned company by the Public Investment Fund (PIF), Checkout.com, Coatue, Shorooq Partners, and Endeavor Catalyst, among others.
 <br/>
 <br/>
 <strong>
  Your Role
  <br/>
  <br/>
 </strong>
 We&rsquo;re seeking a Counter Fraud Specialist to join our Fraud Risk Oversight team (Second Line of Defense).
 <br/>
 <br/>
 In this role, you will play a key part in establishing, enhancing, and maintaining Tamara&rsquo;s Fraud Framework in alignment with SAMA&rsquo;s Counter-Fraud Framework (CFF), ensuring governance, oversight, and compliance maturity across all internal and external fraud risk domains.
 <br/>
 <br/>
 You will contribute to developing fraud risk strategies by analyzing data, investigating internal fraud cases, and assessing control effectiveness across the organization. Drawing on your experience in data analysis (SQL) and exposure to fraud operations, you will support continuous improvements to Tamara&rsquo;s fraud prevention and detection environment.
 <br/>
 <br/>
 You will serve as a SAMA-facing subject matter expert, assisting in providing evidence, documentation, and responses to SAMA inquiries and ensuring full alignment with regulatory expectations. Your experience in working with or within Big Four consulting firms on fraud risk management frameworks will be valuable in building a robust and sustainable second-line function.
 <br/>
 <br/>
 You will collaborate closely with cross-functional stakeholders &mdash; including Fraud Operations, Compliance, Risk, and Internal Audit &mdash; to ensure consistent implementation of fraud governance requirements, effective remediation of identified risks, and transparent communication of key fraud indicators.
 <br/>
 <br/>
 You are driven, analytical, and solutions-oriented, comfortable working under pressure in a dynamic fintech environment. You thrive in data-driven environments, excel at detail-oriented tasks, and can shift seamlessly between strategic thinking and hands-on analysis.
 <br/>
 <br/>
 <strong>
  Your Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Support the development, implementation, and continuous enhancement of Tamara&rsquo;s Internal Fraud Framework, ensuring alignment with SAMA&rsquo;s Counter-Fraud Framework (CFF).
  </li>
  <li>
   Analyze fraud and operational data to detect trends and control weaknesses &mdash; leveraging SQL and analytical tools to generate actionable insights.
  </li>
  <li>
   Investigate internal fraud cases and perform deep-dive analyses into potential internal misconduct, collaborating with relevant stakeholders for resolution.
  </li>
  <li>
   Assist in preparing evidence, documentation, and reports required by SAMA or internal governance bodies; serve as a SAMA-facing representative on fraud risk topics when needed.
  </li>
  <li>
   Perform fraud risk assessments, control testing, and thematic reviews to evaluate the effectiveness of preventive and detective measures.
  </li>
  <li>
   Draft, update, and maintain fraud risk policies and procedures.
  </li>
  <li>
   Collaborate with Fraud Operations and other business lines to ensure accurate root cause analysis and remediation of fraud cases.
  </li>
  <li>
   Contribute analytical input into the design and calibration of internal fraud detection/prevention and internal controls.
  </li>
  <li>
   Monitor fraud and risk alerts daily related to internal fraud and take appropriate oversight actions to ensure operational teams act effectively and timely.
  </li>
  <li>
   Identify emerging fraud patterns and work with control owners to implement risk mitigation measures.
  </li>
  <li>
   Maintain proper documentation for all investigations, reviews, and control testing performed.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Your Expertise
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   4&ndash;7 years of experience in fraud risk management, internal fraud, or governance, preferably within a regulated financial institution or fintech.
  </li>
  <li>
   Experience within or alongside Big Four consulting firms in establishing or assessing internal fraud frameworks aligned with SAMA CFF or similar regulatory standards.
  </li>
  <li>
   Technical proficiency in SQL and comfort with analyzing large datasets.
  </li>
  <li>
   Strong investigative and analytical skills with hands-on exposure to fraud operations and risk assessment.
  </li>
  <li>
   Demonstrated experience in working with regulators (SAMA), preparing documentation, and ensuring full compliance and maturity against regulatory frameworks.
  </li>
  <li>
   Strong collaboration and communication skills, with the ability to work cross-functionally and influence stakeholders.
  </li>
  <li>
   Educational background in IT, Computer Engineering, Software Engineering, or another technical field preferred.
  </li>
  <li>
   High attention to detail, structured thinking, and ability to work independently under minimal supervision.
  </li>
  <li>
   Strong business judgment, discretion, and integrity when handling confidential and sensitive matters.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Join the revolution
  <br/>
  <br/>
 </strong>
 Tamara is a vibrant hub of exceptional individuals worldwide, with over 40+ nationalities committed to working with the broadest talent pool possible. We're proud of the wealth of cultural backgrounds that shape our teams, ensuring every experience is acknowledged and celebrated.
 <br/>
 <br/>
 We seek self driven individuals, fuelled by curiosity, ready to take control of their professional and personal development. We&rsquo;re creating a place where possibilities are for the taking through career mobility, mentoring and cross-border collaboration. This approach has earned us a spot as one of the competitive tech companies to work for.
 <br/>
 <br/>
 All qualified individuals are encouraged to apply.To learn more about how we protect your privacy, please visit our Candidate privacy notice.
</div>


Global Software Resources

<p><div><div><div><div><b>Job Title: IT Audit And </b><b>Compliance Project Specialist</b>
<br>
<b>Location: </b>Oakland<b>, </b>CA<br>
<b>Duration: </b>May 04, 2026<b> </b>&ndash; November 03, 2026,
<br>
<b>ONLY W2 Candidate</b></div>
</div><br>
</div></div><div><div><div><div><b>Account Manager Notes: </b>Hybrid Onsite Requirement: 1-2 days onsite depending on need for that week</div>
</div><br>
</div></div><div><div><div><div><b>Job Description:
</b><br>
<b>Role Overview</b><br>
<br>
The IT Compliance Project Specialist acts as a compliance and governance partner across the IT project portfolio. This role ensures that IT initiatives are planned, designed, and delivered in compliance with applicable regulations, company policies, and compliance standards.<br>
<br>
Working closely with the Compliance Lead, the Specialist provides analysis, documentation, and due diligence to support risk-based decision-making and to maintain compliance throughout the full project lifecycle.<br>
<br>
<b>Key Responsibilities</b><br>
<br>
Project Advisory &amp; Engagement
<ul><li>Serve as a dedicated compliance advisor to project managers and delivery teams.</li>
<li>Identify regulatory, policy, and control requirements early in the project lifecycle and ensure they are embedded into technical designs and project plans.</li>
</ul>Gate Review &amp; Approval Support
<ul><li>Participate in project phase-gate reviews to assess compliance readiness.</li>
<li>Review project artifacts and provide formal recommendations to the Compliance Lead to support approval, conditional approval, or remediation decisions.</li>
</ul>Compliance Lead Support
<ul><li>Function as the primary support resource for the Compliance Lead.</li>
<li>Assist with executive reporting, remediation tracking, and escalation of project-level compliance risks.</li>
</ul>Regulatory &amp; Framework Alignment
<ul><li>Ensure project alignment with applicable regulations and frameworks, including SOX, CCPA, ISO 55001, and internal company standards.</li>
<li>Map project controls and artifacts to regulatory requirements to support a consistent and defensible compliance posture.</li>
</ul><b>Qualifications</b><br>
Experience
<ul><li>5+ years of experience in IT Compliance, IT Audit, or Governance, Risk &amp; Compliance (GRC), preferably supporting large-scale IT projects.</li>
</ul><b>Tools &amp; Systems</b>
<ul><li>Experience using Planisware for project tracking, portfolio governance, and milestone management.</li>
</ul><b>Education</b>
<ul><li>Bachelor&rsquo;s degree in information technology, Cybersecurity, Business, or a related discipline.</li>
</ul><b>Certifications (Preferred)</b>
<ul><li>CISA (Certified Information Systems Auditor)</li>
<li>CRISC (Certified in Risk and Information Systems Control)</li>
<li>CISSP (Certified Information Systems Security Professional)</li>
<li>PMP (Project Management Professional)</li>
</ul><b>Delivery Methodologies</b>
<ul><li>Strong understanding of the Software Development Life Cycle (SDLC).</li>
<li>Experience applying compliance controls in both Agile and Waterfall delivery models.</li>
</ul><b>Professional Skills &amp; Attributes</b>
<ul><li>Regulatory Expertise: Ability to interpret complex regulatory and control requirements and translate them into clear, actionable guidance for technical and project teams.</li>
<li>Analytical Rigor: Strong attention to detail, particularly in validating technical evidence and identifying compliance gaps or control weaknesses.</li>
<li>Consultative Mindset: Ability to function as a trusted advisor while maintaining independence and objectivity when providing recommendations to leadership.</li>
<li>Communication Skills: Strong written and verbal communication skills, with the ability to bridge technical delivery requirements and compliance expectations.</li>
GRC &amp; Project Tool Proficiency: Experience with GRC platforms (e.g., ServiceNow, Archer) and project management tools (e.g., Jira), in addition to Planisware, to maintain visibility across projects and compliance activities.<li>-</li></ul></div></div></div></div></p>

Compliance Project Specialist

Search 10000+ Risk management framework specialist jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 risk management framework specialist jobs Near Me

INFORMATION SYSTEMS SECURITY OFFICER

Information System Security Officer

Information System Security Manager (SIGINT) (5268) (TS/SCI CI Poly) (Ft. Belvoir, VA )

Principal Specialist, Compliance Monitoring

Fraud Analyst (Counter Fraud Specialist)

Fraud Analyst (Counter Fraud Specialist)

Compliance Project Specialist