security compliance officer

Saher Management Consultancies LLC

<div>
 Saher Mangement is Hiring for "
 
 Compliance Officer"
 
 
 
 
 JOB
 
 :
 
 Compliance Officer
 
 
 
 
 Location:
 
 
 Doha, Qatar
 
 
 
 
 Job Summary
 
 
 
 The Compliance Officer is responsible for supporting cybersecurity governance, risk management, and regulatory compliance across enterprise systems and operations. The role ensures that security policies, governance frameworks, and operational procedures align with industry standards and regulatory requirements.
 
 
 This position works closely with internal teams, external partners, and regulatory stakeholders to strengthen information security posture, monitor compliance maturity, and implement best practices for cybersecurity governance and risk management.
 
 
 Key Responsibilities Governance and Compliance Management
 
 
 <ul>
 <li>
 Review existing governance models, security frameworks, and operational processes to assess current compliance maturity.
 </li>
 <li>
 Conduct documentation reviews, stakeholder interviews, and operational assessments to establish the current governance landscape.
 </li>
 <li>
 Define target governance maturity levels aligned with industry standards and regulatory expectations.
 </li>
 <li>
 Identify governance gaps and recommend improvements to strengthen security oversight and control mechanisms.
 </li>
 <li>
 Develop and implement governance operating models to enhance security management structures.
 
 
 </li>
 </ul>
 Risk Management and Security Assessment
 
 
 <ul>
 <li>
 Maintain and update the organizational risk register.
 </li>
 <li>
 Identify, analyze, and document cybersecurity risks, vulnerabilities, and threat exposure.
 </li>
 <li>
 Define risk ownership, escalation paths, and risk acceptance processes.
 </li>
 <li>
 Establish risk appetite guidelines and risk mitigation strategies.
 </li>
 <li>
 Conduct threat modeling, vulnerability assessments, and attack path analysis.
 </li>
 <li>
 Develop countermeasures and security controls to mitigate identified risks.
 
 
 </li>
 </ul>
 Security Policy Development and Implementation
 
 
 <ul>
 <li>
 Develop and maintain security policies covering areas such as:
 </li>
 <ul>
 <li>
 Digital Identity Management
 </li>
 <li>
 Information Classification
 </li>
 <li>
 Cloud Security
 </li>
 <li>
 IoT Security
 </li>
 <li>
 Organizational Security Governance
 </li>
 </ul>
 <li>
 Ensure security policies are applied consistently across systems, platforms, and operational processes.
 </li>
 <li>
 Monitor policy adoption and compliance across stakeholders and departments.
 </li>
 <li>
 Align policies with national and international cybersecurity standards.
 
 </li>
 </ul>
 Compliance Framework and Regulatory Alignment
 
 
 <ul>
 <li>
 Align organizational security practices with industry frameworks such as:
 </li>
 <ul>
 <li>
 General Data Protection Regulation
 </li>
 <li>
 Health Insurance Portability and Accountability Act
 </li>
 <li>
 Payment Card Industry Data Security Standard
 </li>
 </ul>
 <li>
 Ensure that information security controls protect the confidentiality, integrity, and availability of data.
 </li>
 <li>
 Support privacy impact assessments and compliance monitoring activities.
 </li>
 <li>
 Collaborate with relevant teams to ensure regulatory compliance and data protection.
 
 </li>
 </ul>
 Security Awareness and Training
 
 
 <ul>
 <li>
 Develop and manage a continuous security awareness program for employees and stakeholders.
 </li>
 <li>
 Define training requirements based on roles and responsibilities across the organization.
 </li>
 <li>
 Design security training modules covering policies, procedures, and cybersecurity best practices.
 </li>
 <li>
 Deliver workshops and awareness sessions to promote a security-first culture.
 
 
 </li>
 </ul>
 Reporting and Continuous Improvement
 
 
 <ul>
 <li>
 Monitor security performance metrics and governance effectiveness.
 </li>
 <li>
 Prepare security compliance reports and risk assessment summaries for leadership.
 </li>
 <li>
 Maintain ongoing visibility of the organization&rsquo;s security posture.
 </li>
 <li>
 Recommend improvements to enhance security frameworks, policies, and operational practices.
 
 
 </li>
 </ul>
 
 Required Skills And Competencies Core Skills
 
 
 
 <ul>
 <li>
 Cybersecurity Governance
 </li>
 <li>
 Risk Management and Risk Assessment
 </li>
 <li>
 Security Policy Development
 </li>
 <li>
 Compliance Monitoring and Audit Support
 </li>
 <li>
 Threat Modeling and Vulnerability Analysis
 </li>
 <li>
 Regulatory Compliance and Privacy Protection
 </li>
 <li>
 Security Awareness Program Management
 
 
 </li>
 </ul>
 Technical Knowledge
 
 
 <ul>
 <li>
 Information Security Frameworks and Standards
 </li>
 <li>
 Data Protection and Privacy Regulations
 </li>
 <li>
 Risk Management Methodologies
 </li>
 <li>
 Security Controls and Governance Models
 
 
 </li>
 </ul>
 Soft Skills
 
 
 <ul>
 <li>
 Excellent communication and presentation skills
 </li>
 <li>
 Strong stakeholder management capabilities
 </li>
 <li>
 Analytical and problem-solving mindset
 </li>
 <li>
 Ability to work collaboratively with cross-functional teams
 </li>
 <li>
 High attention to detail and compliance discipline
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Security, Cybersecurity, Computer Science, IT, or a related field.
 </li>
 <li>
 Professional certifications such as:
 </li>
 <ul>
 <li>
 CISSP
 </li>
 <li>
 CISM
 </li>
 <li>
 CISA
 </li>
 <li>
 ISO 27001 Lead Implementer or Lead Auditor
 </li>
 </ul>
 <li>
 Experience working in regulated environments or cybersecurity governance programs.
 
 </li>
 </ul>
 Tools and Technologies
 
 
 <ul>
 <li>
 Security governance and compliance tools
 </li>
 <li>
 Risk management and audit tracking systems
 </li>
 <li>
 Security monitoring and reporting platforms
 </li>
 <li>
 Documentation and collaboration tools such as SharePoint and Microsoft Teams.
 
 
 </li>
 </ul>
 #ComplianceOfficer#CorporateCompliance #GovernanceRiskCompliance
 
 
 #GRC#RiskManagement#CyberSecurityGovernance#SecurityCompliance
 
 
 #InformationSecurity#SecurityGovernance#SecurityFrameworks
 
 
 #CyberSecurity#ThreatModeling#VulnerabilityManagement#SecurityRiskAssessment
 
 
 #CyberRiskManagement#SecurityOperations#SecurityControls#DataProtection
 
 
 #PrivacyComplianceComplianceOfficer#CyberSecurityGovernance#RiskManagement
 
 
 #GRC#InformationSecurity#GDPR#SecurityCompliance#CyberRiskManagement
 
 
 #EnterpriseRiskManagement#SecurityAudit
 
 
 Skills: risk,compliance,cybersecurity,information security
</div>

Compliance Officer

Advantage SCI

<div>Job Description: 
Position: Contract Program Security Officer
Reports To: The Customer and Program Manager
Clearance Type: Active TS/SCI with CI Poly or Top Secret with ability to obtain SCI and CI polygraph
Advantage SCI is seeking Contract Program Security Officer to be considered for employment. Individual will provide support to the government Program Security Officer (PSO). CPSO will perform security specialist functions that may include tasks in all security disciplines: including but not limited to personnel, physical, information, and training. CPSO will review and process PERSEC documentation, to include SAP nomination paperwork, loading accesses and documents into access management databases, and brief/debrief personnel to/from SAP programs. CPSO must review, verify, edit, draft, and submit security paperwork to accredit facilities and automated information systems (AIS) in accordance with applicable policies. They will conduct or support the periodic security inspections of cleared facilities to ensure compliance with the Technical Specifications for Construction and Management of SAP Sensitive Compartmented Information Facilities, National Industrial Security Programs Operating Manual (NISPOM), the NISPOM supplemental, and-any unique requirements of various classified programs. Travel within the United States (CONUS plus Alaska and Hawaii, but not the U.S. Territory) to conduct or support facility inspections. Draft and maintain standard operating procedures (SOP), Security Classification Guides (SCGs) and other essential security documents, records. Implement a security education program for assigned personnel tailored to supported programs. 
Experience and Skills:<ul><li>
Active TS/SCI with CI Poly or Top Secret with ability to obtain SCI and CI polygraph</li><li>
Bachelor's degree or equivalent experience.</li><li>
5 years specialized experience with government security databases (e.g., JADE, Scattered Castles, DISS).</li><li>
Training and experience working with SAPs.</li><li>
Completion of the instructor led Center for Development of Security Excellence (CDSE) Introduction to SAPSs course; experience implementing security training to meet specific SAP requirements; experience performing PSO functions in support of both government and contractor customers.</li><li>
Completion of CDSE Orientation to SAP Security Compliance Inspections course.</li><li>
Experience with SCIF Accreditations and Inspections.</li><li>
Possess a TS/SCI and successfully passing CI Poly.</li><li>
Knowledge of the Microsoft Office Suite, particularly Outlook, Word, and Excel.</li><li>
Excellent written and oral reporting skills, interpersonal skills, and the ability to communicate at all levels of the organization and customers across geographically dispersed sites.</li><li>
Experience working in DIA a plus.</li><li>
Must have a valid certification of completion in PII and Cyber Awareness Challenge from Information Assurance Support Environment (Only valid within 30 days of hire). To obtain the certification, visit http://iase.disa.mil/eta/.
</li></ul>Working Conditions:
<ul><li>Able to sit and work at a computer keyboard for extended periods of time</li><li>
Able to stoop, kneel, bend at the waist, and reach daily</li><li>
Able to lift up to 35 pounds occasionally</li><li>
Noise level: Low to moderate
</li></ul>Advantage SCI, LLC is an Equal Opportunity Employer
EXECUTIVE ORDER 11246 Prohibits discrimination against any employee or applicant on the basis of race, sex, color, religion, or national origin and requires affirmative action to ensure that applicants are employed, and employees treated, without regard to race, sex, color, genetic information, religion, or national origin. (Enforcement Agency: U.S. Department of Labor, Office of Federal Contract Compliance Programs) 
From: Advantage SCI</div>

Contract Program Security Officer

PROZ TECHNOLOGIES

Hello, Greetings from Proztec Qatar! I hope everything is going well with you.We are thrilled to extend multiple exciting job opportunities, and currently, we are hiring for the role of Compliance officerwith one of our prestigious clients in Qatar. Below, you will find details of the role, key responsibilities, and requirements.JOB OVERVIEWJOB TITLE : Compliance officerLOCATION : Doha, QatarGENERAL JOB DESCRIPTIONSeveral advisory services in term of Security Management and Governance are being expected to support the adaptation of the policies, guidelines, for example, covering:&middot; Risk management.&middot; Threats and vulnerabilities modeling.&middot; Attacks path modeling and countermeasures.&middot; Managerial aspects concerning information security.&middot; Assessment of information security effectiveness and degrees of control.&middot; Awareness and Education around security concepts for all stakeholders.&middot; Standards for information security.&middot; Reporting (e.g. disaster recovery and business continuity).&middot; Theoretical and empirical analysis.&middot; Economic aspects of the cybersecurity ecosystem.&middot; Capability modeling.&middot; Liaise with MOTC, Ooredoo and other stakeholders in the project and be the focal point for all cyber security related tasks.Build and drive a successful cyber security practice for Tasmu based on Industry and International best practices in the constantly evolving cyber threat landscape.DUTIES &amp; RESPONSIBILITIESThe Compliance and Audit activity provides the key elements that include:&middot; Review existing governance models, structure, and process: Review documentation, capture existing practices, conduct interviews, draw the current landscape, and define the baseline for the engagement activity.&middot; Define the targeted level of maturity on the governance level.&middot; Perform Gap Analysis: Analyze current organizational governance structures with well-defined industry frameworks, standards, and models &ndash; identify opportunities to strengthen existing methods and structures and/or replace them with new and improved methods.&middot; Define Governance Operating Model: Identifies governance structure inconsistencies, overlaps, and gaps among governance mechanisms and maps current governance processes and structures.&middot; Plan of Action deliverables: Provides a set of deliverables that provide visibility and insights into the engagement activities, current landscape, achievable target state (i.e., desired state to accomplish), prioritized set of actions with milestones, to lead towards the target state to enhance and strengthen the security framework.Policy enablement : &middot; Enable security policies on key aspects such as Digital identification, Global Security, Information Classification, IoT Security, and Organization Governance to improve security based on the emergence of new threats, new technological trends, and national/international regulatory framework evolution.&middot; Ensure that policies are applied on use case and IoT services definition.&middot; Collaborate with Microsoft on the definition of Cloud-based Security Control Framework to ensure and ease the sharing, compliance, and application of policies as well as the follow-up of the adoption of those policies by all TASMU ecosystem's stakeholders.Awareness :The objective of the Awareness activity is to provide training and awareness sessions on information security to TASMU operators/key personnel. This awareness program shall be based on policies, standards, procedures, and best practices previously defined as well as performed in a risk-centric approach to enable TASMU operators to understand the stakes/challenges of cybersecurity within the TASMU program's context.The Awareness program should be conducted as an on-going program to ensure that training and knowledge are not just delivered as an annual activity, rather it is used to maintain a high level of security awareness on a daily basis.&middot; Assemble the Security Awareness Team&middot; Determine Roles for Security Awareness&middot; Identify levels of responsibility (Management, specific roles, and all other personnel)&middot; Establish Minimum Security Awareness and the depth of the security awareness training required for each stakeholder&middot; Determine the content of training and applicabilityRisk Management: The Risk Management activity is including risk identification, analysis, and control. In the frame of security operations phases, the following actions are needed:&middot; Review and refresh the Risk register&middot; Identify points of Risk Acceptance and ownership&middot; Identify paths of Risk Escalation&middot; Establish Risk Appetite&middot; Identify, Analyze &amp; DocumentThe improvements and modernization will provide benefit by: &middot; Providing guidelines for governance security and privacy&middot; Provide a mapping between client controls and industry standards&middot; Ensure that an organization's security policy continues to meet the changing and evolving needs of the underlying business.&middot; Maintain on-going situational awareness of the security state of an organization's network, information systems, and the environments in which those systems operate.Privacy : Extended knowledge with regulatory contexts such as GDPR, HIPAA, FFIEC, PCI, CJIS, etc. and mapping services with respect to protecting the information (integrity, confidentiality and availability) in accordance with these frameworks and with the policies enforced within the TASMU ecosystem (i.e. Information Classification Policy).GDPR knowledge provides a complete approach to compliance, ensuring smooth adoption, and minimizing any future breach risk. Services are broad in scope and cover everything from the initial impact assessment to guidance in the appointment of a Data Protection Officer.The Privacy related activities shall be conducted in agreement with incident management and response activities to be able to identify unauthorized presence before data leaks, apply protective measures and in the worst case, identify and retrieve the data leaked (DLP related controls).SKILLS &amp; ABILITIES&middot; Experience Excellent interpersonal skills&middot; Excellent communication and presentation skills&middot; Customer oriented&middot; Relevant technology skills.&middot; Relevant product and solution skillsIf you are interested and ready to proceed, kindly share your CV in Word format along with the following details:Name:Nationality:Total Experience:Relevant Experience:Current Location:Visa Status:Current Salary:Expected Salary:Notice Period:About Proztec: Proz Technologies (PROZTEC) is a leading ICT specialist firm based in Doha, Qatar (a tax-free country) with over 300 employees. We look forward to the possibility of welcoming you to our growing team.Thanks &amp; regards, Syeda Humera Recruitment Consultant Proz Technologies M: 974-70955929 P: 974-4442-0050 Ext: 109 www.proztec.comJob Type: PermanentPay: QAR10,000.00 - QAR15,000.00 per month

Compliance officer

Booz Allen Hamilton

<div>Facility Security Officer
The Opportunity:
Perform as the designated Facility Security Officer. Ensure the protection of company and government sensitive and classified information. Coordinate and monitor highly sensitive aspects of the DoD and other industrial security programs and security activities, ensuring compliance with government and company security policies and procedures. Conduct highly sensitive security briefings and coordinate all security education programs. Establish and maintain relationships with the client and government client security POCs. Prepare, obtain approval for, and execute security plans, Security Operating Procedures (SOP), Systems Security Plans (SSPs), and Concepts of Operations (CONOPS). Apply advanced consulting skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction. Develop or contribute to solutions to a variety of problems of moderate scope and complexity. Review and investigate non-compliance issues. Provide security advice, guidance, and recommendations to all levels of staff. Manage program and administrative activities regarding security clearances for the organization's employees and advise management and personnel on issues. Assist with ad hoc proposal security volume reviews. Coordinate security support for classified contracts with the client as the oversight security authority.
You Have:<ul><li>
Experience with performing industrial security functions for sensitive security programs, including Collateral or SCI programs</li><li>
Experience with using Microsoft Office software applications</li><li>
Knowledge of industrial security systems or databases, including DISS and NISS</li><li>
Knowledge of Title 32 of the Code of Federal Regulations (32 CFR), National Industrial Security Program Operating Manual (NISPOM), Security Executive Agent Directive (SEAD) 3 and 4, Intelligence Community Directive (ICD), and DoD security requirements</li><li>
Ability to respond to occasional after-hours alarms, as needed</li><li>
Associate's degree</li><li>
Ability to obtain FSO Program Management for Possessing Facilities Certification within 6 months of start date</li></ul>
Nice If You Have:<ul><li>
Experience with handling sensitive information, operational security (OPSEC), and completing incident reporting</li><li>
Experience with performing DoD directed inspections</li><li>
Ability to pay strict attention to detail</li><li>
Ability to be highly flexible, motivated, and coachable</li><li>
Ability to pivot from one task to another and be available for a variety of tasks as the need arises</li><li>
Possession of excellent judgment, decision-making, teamwork, and customer service skills</li><li>
Possession of excellent verbal and written communication skills</li></ul>
Clearance: 
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $55,300.00 to $126,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Facility Security Officer

Tangent Technologies

<div>Tangent Technologies is seeking a skilled Information Systems Security Officer (ISSO) to support a federal program. The ISSO will ensure ongoing security, compliance, and risk management of information systems. This role is critical in the development and implementation of system security documentation and procedures, which are required to obtain and maintain an Authority to Operate (ATO). 
In this position, the ISSO will serve as a trusted security advisor, ensuring compliance with federal standards including NIST, FISMA, FedRAMP, and the Risk Management Framework (RMF). The ISSO will also help implement effective continuous monitoring practices for assigned systems. 
 
Candidates should be proactive, detail-oriented, and possess strong communication skills for client engagement. 
 
This position is 100% REMOTE.<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Security Assessment &amp; Authorization (A&amp;A): Lead the preparation of ATO packages, including System Security Plans (SSPs), Plans of Action &amp; Milestones (POA&amp;Ms), Security Assessment Reports (SARs), and supporting documentation. Guide systems through the ATO lifecycle and continuous authorization processes, ensuring compliance with NIST SP 800-53, FISMA, and RMF standards.</li><li>
Risk Mitigation: Conduct Security Impact Analyses (SIA) for system changes, develop mitigation strategies for identified vulnerabilities, and collaborate with system engineers to maintain secure system baselines.</li><li>
Compliance Enforcement: Perform self-assessments, risk assessments, and annual testing of Contingency Plans and Incident Response Plans.</li><li>
Continuous Monitoring: Review audit logs, analyze vulnerability scans, and evaluate system-level reports to ensure the effectiveness of security controls.</li><li>
Technical Knowledge: Demonstrate expertise in network security, cloud environments (including containers and architectures), operating systems, and security assessment tools.</li></ul><h2 class="jobSectionHeader">
Required Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in IT, Cybersecurity, or a related field</li><li>
Minimum of 6 years of experience in ISSO or RMF roles</li><li>
Direct experience developing ATO packages (SSP, POA&amp;M, SAR)</li><li>
Strong knowledge of NIST SP 800-53, FISMA, and RMF requirements</li><li>
Demonstrated ability to manage multiple systems (4-6 simultaneously)</li></ul><h2 class="jobSectionHeader">
Preferred Qualifications</h2><ul><li>
Experience with cloud-based systems (SaaS, IaaS, PaaS) from major providers such as AWS, Azure, or GCP</li><li>
Experience using Google Suite tools</li><li>
Familiarity with AI tools such as Gemini, ChatGPT etc.</li><li>
Familiarity with Archer or CSAM platforms</li><li>
Relevant certifications (one required): CISSP, CISM, CISA, CRISC, CGRC</li><li>
Experience supporting federal civilian agencies. Active Public Trust clearance</li></ul><h2 class="jobSectionHeader">
Veteran Hiring Preference</h2>
Tangent Technologies is a Service-Disabled Veteran-Owned Small Business (SDVOSB). Veterans and military-affiliated individuals are strongly encouraged to apply.<h2 class="jobSectionHeader">
Security Requirement</h2>
Candidates must successfully complete a federal background investigation, which includes a financial suitability screening. 

U5IWWr580X</div>

Information Systems Security Officer (ISSO) – Mid/Senior Level

Raytheon

<div>Date Posted:
2026-03-18
Country:
United States of America
Location:
US-MA-ANDOVER-AN1 ~ 350 Lowell St ~ AN1 ESSEX BLDG
Position Role Type:
Onsite
U.S. Citizen, U.S. Person, or Immigration Status Requirements:
Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Security Clearance Type:
DoD Clearance: Secret
Security Clearance Status:
Active and existing security clearance required on day 1
At Raytheon, the foundation of everything we do is rooted in our values and a higher calling &ndash; to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today&rsquo;s mission and stay ahead of tomorrow&rsquo;s threat. Our team solves tough, meaningful problems that create a safer, more secure world.
Our cybersecurity team, is seeking an Information System Security Officer (ISSO) to support our team 100% onsite at our facility in Andover, Massachusetts. You will interface and collaborate with the Information Systems Security Manager (ISSM) to ensure adherence to all NISPOM Chapter 8, DAAPM, JSIG policies.
What You Will Do
<ul><li>You will be primarily responsible for system compliance, auditing, security plan development and delivering information systems security education and awareness.</li><li>
You will also assist in investigating information system security violations and help prepare reports specifying corrective and preventative actions.</li><li>
The position routinely collaborates with the facility security team, program personnel, and government representatives.</li><li>
Security sustainment activities (hardware change management, software change management, account management, media protection, user interface, file transfers, etc.)</li></ul>
Important note: Within six months of hire date, you must obtain and maintain a Security professional certification commensurate with IAM Level I certification (Security+ or other), if you do not already have this certification.
Qualifications You Must Have
<ul><li>Typically requires a University Degree and minimum 2 years prior relevant experience, or an Advanced Degree in a related field.</li><li>
Relevant Experience Considered in any combination:<ul><li>
Cybersecurity, systems security or hardening</li><li>
Information Technology</li><li>
Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA</li><li>
Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics)</li><li>
Physical security/security, policework/criminal justice, investigations, or Border Patrol</li><li>
Project or program management, office management, senior administration, or account management</li></ul></li></ul>
Qualifications We Prefer<ul><li>
Experience working in DoD classified operating and/or laboratory environments</li><li>
Familiarity with cybersecurity Risk Management Framework (RMF) and compliance as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs and associated NIST publications</li><li>
Experience with audit reviews such as physical security, network and system event logs, password administration, file access privileges, etc.</li><li>
Familiarity with the execution and management of cyber incident response; preservation, containment, and eradication</li><li>
Ability to work independently and as a member of a team</li><li>
Self-motivated and possess exceptional written and verbal communication skills, particularly in documenting evaluation results</li><li>
Customer focused, adaptable and willing to work varying assignments</li><li>
Completion of National Industrial Security Program cybersecurity training courses available at https://cdse.usalearning.gov/login/index.php</li></ul>
What We Offer
Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Trust, Respect, Accountability, Collaboration, and Innovation.
Relocation Non-Eligible &ndash; Relocation assistance not available
Learn More &amp; Apply Now!
Please consider the following role type definition as you apply for this role:<ul><li>
Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products</li></ul>
We are RTX
#LI-Onsite
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.
The salary range for this role is 68,900 USD - 131,100 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate&rsquo;s work experience, location, education/training, and key skills.
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company&rsquo;s performance.
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans&rsquo; Readjustment Assistance Act.
Privacy Policy and Terms:
Click on this link to read the Policy and Terms</div>

Information System Security Officer (ISSO) - Andover, MA

Versatech, Inc.

<div><div>VersaTech is an ISO-certified provider of innovative technology solutions to the public sector, providing services that include Digital Transformation, IT Infrastructure Support, Cyber Security, Agile Software Development, Audio Visual Solutions, and Healthcare Consulting. Our long record of customer satisfaction and commitment to excellence provides assurance to our clients that we have the talent, management, and innovation necessary to solve their problems and exceed expectations.</div>
<div></div><div>VersaTech is currently looking for an Information Security Officer (ISSO) to ensure that security requirements for major applications or general support system are being or will be met. Must have experience working in a federal environment. This position is remote. The successful candidate will ensure that requests for security authorization of computer systems are completed in accordance with the published procedures and communicate with multiple levels of IT and business staff. This position is remote.</div>
<div></div><div>Salary: $100,000 - $130,000 depending on experience. Discretionary annual bonus based on performance.</div>
<div></div><div>ISSO Essential Duties</div>
<ul><li>Maintain an inventory of hardware and software</li>
<li>Coordinate the development of a Contingency Plan and ensure that the plan is tested and maintained</li>
<li>Demonstrated experience writing information system security documentation.</li>
<li>Knowledge and experience with information security standards, policies and practices - NIST (800-53 rev4), FISMA</li>
</ul><div>Privacy Analyst Essential Duties</div>
<ul><li>Advanced knowledge of Privacy Threshold assessments, Privacy Impact Assessments, and Privacy Continuous Monitoring Assessments.</li>
<li>Advanced knowledge of CSAM management</li>
<li>Advanced knowledge of Disaster Recovery (FCD-1), ISCP development and exercises</li>
<li>Strong knowledge of 800-53 rev 4 &amp; rev 5</li>
<li>Strong knowledge of ISSO duties (SSPs, POAM management, vulnerability management)</li>
</ul><div>Requirements:</div>
<ul><li>5 years of experience in Information Security, with a preference for a B.S. in IT or Information Security (or 2 additional years of relevant experience in lieu of a degree).</li>
<li>Knowledge of information security engineering, design concepts and principles.</li>
<li>Recent experience working with a federal customer.</li>
<li>Knowledgeable with the Systems Development Lifecycle (SDLC) and continuous monitoring methodologies.</li>
<li>Extensive experience analyzing information technology and system risk in complex environments and articulating results (verbal/reports) to all levels of management.</li>
<li>Must be a team player with &quot;can do&quot; attitude. Must be able to work independently with initiative and innovation.</li>
<li>Knowledge of vulnerability assessment tools (NESSUS, etc.) and analyzing the reports generated from these assessments.</li>
<li>Must have excellent written communication skills as the candidate's job will include written interaction with senior- level executives.</li>
<li>Ability to use MS Office, Ability to use PC, Analytical and Critical Thinking Skills, Interpersonal and People Skills, Listening Skills, Multi-Tasking Ability.</li>
<li>Bachelor&rsquo;s degree in cyber security or related field</li>
</ul>
<div></div><div>Preferred Qualifications:</div>
<ul><li>Industry certifications, such as CISSP, CAP, Security+ certifications are preferred.</li>
<li>Exceptional interpersonal and verbal communication skills, with the ability to collaborate well across teams and organizations.</li>
<li>Proven ability to multi-task and deliver on-time with the highest quality.</li>
</ul>
<div></div><div>Clearance: Ability to obtain and maintain a Public Trust Clearance</div>
<div></div><div>Find out who we are: https://www.versatechinc.com/</div>
<div></div><div>VersaTech offers an excellent benefits package that includes medical, dental, and vision benefits, 401k employer-matching retirement contributions after 90 days, generous paid time off (3 weeks PTO plus 11 holidays), and ample growth opportunities.</div>
<div></div><div>VersaTech, Inc. is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decision without regard to race,</div>
<div>color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.</div></div>

Information Security Officer (ISSO)

Search 10000+ Security compliance officer jobs near you this March. New roles added regularly across leading industries. Apply today.