security compliance specialist

Striker Strategies

<div>
 
 
 About Striker Strategies
 
 
 
 Striker Strategies is a mission-focused engineering and technology company supporting national security and federal government missions. The company provides systems engineering, information technology, and mission support services that enable agencies to operate effectively in complex and high-stakes environments. Striker Strategies partners closely with government clients to design, integrate, and sustain reliable technology solutions that strengthen operational readiness, secure communications, and critical infrastructure. With a commitment to technical excellence and mission success, the team delivers practical, results-driven solutions that support evolving government priorities.
 
 
 
 
 
 
 Position Overview
 
 
 
 Striker Strategies is seeking a Cyber Security Specialist (ISSO) to support federal information systems by ensuring compliance with cybersecurity requirements and maintaining system security posture. This role supports Risk Management Framework (RMF) activities, continuous monitoring, and system authorization efforts in support of mission-critical systems.
 
 
 
 
 
 
 Responsibilities
 
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Support implementation of security controls aligned with NIST SP 800-53
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Assist in RMF lifecycle activities, including ATO package development
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Maintain and update security documentation (SSP, POA&amp;M, SAR)
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conduct vulnerability scanning and remediation tracking (e.g., ACAS/Nessus)
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Monitor system compliance and support continuous monitoring
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Coordinate with ISSM, system owners, and engineering teams
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Support audits and assessments (FISMA, CMMC, agency-specific)
 
 
 
 
 
 
 Qualifications
 
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;3&ndash;7 years of cybersecurity or information assurance experience
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;CompTIA Security+ Certification
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Experience supporting RMF and system authorization processes
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Knowledge of NIST 800-53 and federal security frameworks
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Strong documentation and communication skills
 
 
 
 
 
 
 Preferred Certifications
 
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;CompTIA Cybersecurity Analyst (CySA+)
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Certified Ethical Hacker (CEH)
 
 
 &middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Certified Authorization Professional (CAP)
 
 
 
 
 
 
 Clearance Requirement
 
 
 
 Must possess an active CBP Background Investigation (BI) / DHS suitability clearance (EOD) or an active Secret clearance with the ability to obtain and maintain DHS suitability.
 
 
 
 
</div>

Cyber Security Specialist

Booz Allen Hamilton

<div>Industrial and Program Security Specialist, Junior<div><div>
The Opportunity:</div><div>
Maintain the integrity and compliance of facility security operations. Carry out assigned security tasks and following established policies and procedures in accordance with 32CFR Part 117, National Industrial Security Program Operating Manual (NISPOM), and other relevant government regulations. Complete tasks as assigned and periodically check in with supervisors before moving on to the next step, ensuring all work is documented and approved. Assist the Facility Security Officer (FSO) and Alternate FSO with specific tasks, including preparing Facility Dashboard Reports, incident reports, administrative inquiries, foreign travel reports, local and special briefings, and classified conference documentation. Assist team members with maintaining Open Storage Areas and other secure spaces. Record incoming Visit Authorization Requests, document external visitors to the facility, and maintain security container records. Help with the control and accountability of classified information by performing marking, receipt, wrapping, transmission, inventory, and destruction tasks. Issue courier cards and complete forms such as SAARs and DEERS Enrollment as directed.</div><div> 
You Have:</div><div><ul><li>
Experience as a security specialist supporting the NISPOM and DoD collateral security guidance
</li><li>Ability to work collaboratively with team members and foster a positive work environment</li><li>
Ability to enforce compliance requirements in high pressure environments</li><li>
Ability to interpret security requirements for classified contracts, including DD254s</li><li>
Top Secret clearance</li><li>
HS diploma or GED</li><li>
Center for Development Security Excellence (CDSE) Certification</li></ul></div></div><div><div> 
Nice If You Have:</div><div><ul><li>
Experience handling classified information and secure facility operations
</li><li>Possession of excellent written and verbal communication skills</li><li>
Possession of strong organizational skills and attention to detail for maintaining records and supporting documentation</li><li>
Bachelor&rsquo;s degree</li></ul></div> 
Clearance:<div>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.</div></div>
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $48,000.00 to $98,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Industrial and Program Security Specialist, Junior

Amazon Web Services

<div><h2 class="jobSectionHeader">DESCRIPTION</h2><div>
Amazon Web Services (AWS) is looking for a certifications compliance specialist to help drive implementation of a compliance-focused hardware certification program for data center hardware, globally. This program will support AWS&rsquo;s product compliance function covering hundreds of internal use data center and customer-focused hardware products. The program will encompass global certifications for product safety, electromagnetic compatibility (EMC), radio frequency (RF), energy efficiency, and restricted substances. The international certifications program will develop and implment defensible certification strategies, partner with suppliers to deploy certification strategy, and own the end to end management of global certification status of products through out the product lifecyle. The certifications program will interface with the compliance engineering team, hardware development and business teams, supply chain and logistics, equipment suppliers, third party test labs and certification agencies, 
 
You will report to the Senior Manager, Product Compliance Operations and be part of the product compliance function within AWS&rsquo;s Global Trade and Product Compliance team (GTPC) that ensures that all equipment procured for use in AWS data centers, as well as equipment sold or provided to customers, satisfies global regulatory requirements.
 
 
AWS is at the forefront of providing a broad set of global cloud-based services including AI/ML, compute, storage, databases, networking, and enterprise applications, to help organizations move faster, lower IT costs, and scale. You will be a part of a dynamic business within Amazon.com, and one of the world&rsquo;s fastest growing and evolving companies, with a team of exceptionally talented, bright and innovative people. GTPC is responsible for ensuring that the infrastructure equipment necessary to support the AWS services are imported/exported in a compliant manner across the multiple countries where AWS operates and will expand, including all product certification/safety regulations.
 
 
Key job responsibilities 
<ul><li>Drive implementation of a compliance-focused hardware certifications program.</li><li>Build programs for sustained operational execution and build stakeholder relationships.</li><li>Collect, validate, and evidence of compliance at the product and country level across a large portfolio of hardware products. Provide real-time compliance status of equipment to key business partners.</li><li>Manage relationships with test labs and certification agencies, including contracting and budget.</li><li>Track certification expiration and manage renewal of certifications.</li><li>Design and drive scalable processes within a Quality Management System (QMS) to ensure consistent compliance with product regulatory requirements around the world.
</li><li>Partner with key stakeholders to help define program strategy, project plans, and manage technology implementations.</li></ul> 
About the team 
Diverse Experiences 
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying. 
 
Why Amazon Security? 
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. 
 
Inclusive Team Culture 
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. 
 
Training &amp; Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</div><h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>Bachelor's degree in engineering or equivalent</li><li>Experience implementing scalable compliance solutions (technology, procedures, processes, etc.) in a regulated environment</li><li>Experience in hardware design and validation of components, subsystems and systems</li><li>Experience in project management, delivery and/or program management</li><li>Experience effectively communicating complex concepts through written and verbal communication</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>Knowledge of statutory compliance requirements</li><li>Experience that includes strong analytical skills, attention to detail, and effective communication abilities, or experience in technical support</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company&rsquo;s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, CA, Sunnyvale - 112,200.00 - 196,300.00 USD annually 
USA, WA, Seattle - 102,000.00 - 178,400.00 USD annually</div>

International Certifications Specialist, AWS Compliance & Security Assurance

PROZ TECHNOLOGIES

Hello, Greetings from Proztec Qatar! I hope everything is going well with you.We are thrilled to extend multiple exciting job opportunities, and currently, we are hiring for the role of Compliance officerwith one of our prestigious clients in Qatar. Below, you will find details of the role, key responsibilities, and requirements.JOB OVERVIEWJOB TITLE : Compliance officerLOCATION : Doha, QatarGENERAL JOB DESCRIPTIONSeveral advisory services in term of Security Management and Governance are being expected to support the adaptation of the policies, guidelines, for example, covering:&middot; Risk management.&middot; Threats and vulnerabilities modeling.&middot; Attacks path modeling and countermeasures.&middot; Managerial aspects concerning information security.&middot; Assessment of information security effectiveness and degrees of control.&middot; Awareness and Education around security concepts for all stakeholders.&middot; Standards for information security.&middot; Reporting (e.g. disaster recovery and business continuity).&middot; Theoretical and empirical analysis.&middot; Economic aspects of the cybersecurity ecosystem.&middot; Capability modeling.&middot; Liaise with MOTC, Ooredoo and other stakeholders in the project and be the focal point for all cyber security related tasks.Build and drive a successful cyber security practice for Tasmu based on Industry and International best practices in the constantly evolving cyber threat landscape.DUTIES &amp; RESPONSIBILITIESThe Compliance and Audit activity provides the key elements that include:&middot; Review existing governance models, structure, and process: Review documentation, capture existing practices, conduct interviews, draw the current landscape, and define the baseline for the engagement activity.&middot; Define the targeted level of maturity on the governance level.&middot; Perform Gap Analysis: Analyze current organizational governance structures with well-defined industry frameworks, standards, and models &ndash; identify opportunities to strengthen existing methods and structures and/or replace them with new and improved methods.&middot; Define Governance Operating Model: Identifies governance structure inconsistencies, overlaps, and gaps among governance mechanisms and maps current governance processes and structures.&middot; Plan of Action deliverables: Provides a set of deliverables that provide visibility and insights into the engagement activities, current landscape, achievable target state (i.e., desired state to accomplish), prioritized set of actions with milestones, to lead towards the target state to enhance and strengthen the security framework.Policy enablement : &middot; Enable security policies on key aspects such as Digital identification, Global Security, Information Classification, IoT Security, and Organization Governance to improve security based on the emergence of new threats, new technological trends, and national/international regulatory framework evolution.&middot; Ensure that policies are applied on use case and IoT services definition.&middot; Collaborate with Microsoft on the definition of Cloud-based Security Control Framework to ensure and ease the sharing, compliance, and application of policies as well as the follow-up of the adoption of those policies by all TASMU ecosystem's stakeholders.Awareness :The objective of the Awareness activity is to provide training and awareness sessions on information security to TASMU operators/key personnel. This awareness program shall be based on policies, standards, procedures, and best practices previously defined as well as performed in a risk-centric approach to enable TASMU operators to understand the stakes/challenges of cybersecurity within the TASMU program's context.The Awareness program should be conducted as an on-going program to ensure that training and knowledge are not just delivered as an annual activity, rather it is used to maintain a high level of security awareness on a daily basis.&middot; Assemble the Security Awareness Team&middot; Determine Roles for Security Awareness&middot; Identify levels of responsibility (Management, specific roles, and all other personnel)&middot; Establish Minimum Security Awareness and the depth of the security awareness training required for each stakeholder&middot; Determine the content of training and applicabilityRisk Management: The Risk Management activity is including risk identification, analysis, and control. In the frame of security operations phases, the following actions are needed:&middot; Review and refresh the Risk register&middot; Identify points of Risk Acceptance and ownership&middot; Identify paths of Risk Escalation&middot; Establish Risk Appetite&middot; Identify, Analyze &amp; DocumentThe improvements and modernization will provide benefit by: &middot; Providing guidelines for governance security and privacy&middot; Provide a mapping between client controls and industry standards&middot; Ensure that an organization's security policy continues to meet the changing and evolving needs of the underlying business.&middot; Maintain on-going situational awareness of the security state of an organization's network, information systems, and the environments in which those systems operate.Privacy : Extended knowledge with regulatory contexts such as GDPR, HIPAA, FFIEC, PCI, CJIS, etc. and mapping services with respect to protecting the information (integrity, confidentiality and availability) in accordance with these frameworks and with the policies enforced within the TASMU ecosystem (i.e. Information Classification Policy).GDPR knowledge provides a complete approach to compliance, ensuring smooth adoption, and minimizing any future breach risk. Services are broad in scope and cover everything from the initial impact assessment to guidance in the appointment of a Data Protection Officer.The Privacy related activities shall be conducted in agreement with incident management and response activities to be able to identify unauthorized presence before data leaks, apply protective measures and in the worst case, identify and retrieve the data leaked (DLP related controls).SKILLS &amp; ABILITIES&middot; Experience Excellent interpersonal skills&middot; Excellent communication and presentation skills&middot; Customer oriented&middot; Relevant technology skills.&middot; Relevant product and solution skillsIf you are interested and ready to proceed, kindly share your CV in Word format along with the following details:Name:Nationality:Total Experience:Relevant Experience:Current Location:Visa Status:Current Salary:Expected Salary:Notice Period:About Proztec: Proz Technologies (PROZTEC) is a leading ICT specialist firm based in Doha, Qatar (a tax-free country) with over 300 employees. We look forward to the possibility of welcoming you to our growing team.Thanks &amp; regards, Syeda Humera Recruitment Consultant Proz Technologies M: 974-70955929 P: 974-4442-0050 Ext: 109 www.proztec.comJob Type: PermanentPay: QAR10,000.00 - QAR15,000.00 per month

Compliance officer

Cormac Corporation

<div>CORMAC is seeking a Security Compliance Engineer. The duties of this role involve security analysis, framework governance, and hands-on development work. Both technical and governance responsibilities are handled by the Security Compliance Developer in this pivotal role for safeguarding complex federal healthcare systems: the Developer handles code development work to implement secure coding solutions, maintaining a strong security posture across applications in robust cloud environments, and works with stakeholders to develop &amp; maintain a cybersecurity governance framework and organizational security policies.
Responsibilities:<ul><li>
Review applications and services for security issues, then directly implement changes to code to remediate security issues as well as proactively implement security controls.</li><li>
Work closely with the Product Owners, ISSOs, engineering and infrastructure staff to provide guidance on implementation of security policies, standards, and procedures.</li><li>
Creates design documentation following federal security and compliance frameworks, including HIPPA, NIST, etc.</li><li>
Analyze and interpret agency security requirements and ensure compliance with standards.</li><li>
Collaborate with agency representatives to implement security initiatives through direct code development work.</li><li>
Conducts and subsequently handles code-based remediation for vulnerability assessments. Monitors networks, databases and Web-based assets for potential system breaches.</li><li>
Respond to alerts from information security tools. Report, investigate, and resolve higher level security incidents.</li><li>
Iterates on security rules and alerting capabilities. Create and maintain security tool dashboards and reporting.</li><li>
Educates and communicates security requirements and teaches safe coding practices to organization users with hands-on lessons, with a focus on continuous improvement of security standards and maintenance of internal security.</li><li>
Provide vulnerability &amp; compliance reviews and present any findings to government stakeholders, followed by direct remediation work as a developer.</li></ul>
Basic Qualifications:<ul><li>
Bachelor's degree in Cybersecurity, Computer Science, Information technology, or similar field.</li><li>
Must be a U.S. Citizen.</li><li>
Must be able to obtain a Public Trust (Tier I) Clearance</li><li>
Minimum of 5+ years of progressive experience in information security, cybersecurity engineering, or system security roles, with demonstrated technical depth and increasing responsibility.</li><li>
Ability to maintain cybersecurity framework compliance from a governance perspective while handling direct coding work through hands-on development and remediation for security issues or security control implementation.</li><li>
Experience in coding, with the ability to directly handle updating code in a development role.</li><li>
Hands-on coding, scripting, or automation experience using Python, JavaScript, and Bash improve security operations, remediate security issues, or perform compliance validation.</li><li>
Proven experience owning and maintaining an Authorization to Operate (ATO), including authoring, updating, and defending security artifacts such as System Security Plans (SSPs), Incident Response Plans, contingency plans, and related documentation.</li><li>
Demonstrated hands-on experience managing vulnerability and compliance scanning programs remediation using tools such as Tenable, AWS Security Hub, and Snyk.</li><li>
Ability to assess security findings through reviewing code, determine risk severity, prioritize remediation, and drive closure in through directly updating code.</li><li>
Strong hands-on experience securing cloud-based environments, with a focus on AWS (IAM, GuardDuty, CloudTrail, Security Hub) and SaaS platforms.</li><li>
Experience with least-privilege enforcement across cloud, application, and CI/CD environments.</li><li>
Strong written and verbal communication skills, with the ability to clearly articulate security risks, requirements, and remediation strategies to technical teams, leadership, and government stakeholders.</li><li>
Ability to work independently and as part of a cross-functional team, managing multiple priorities in a fast-paced, highly regulated environment.</li></ul>
Preferred Qualifications:<ul><li>
Master&rsquo;s of Science in Cybersecurity, Computer Science, Information Technology, or similar fields.</li><li>
Experience with governance and direct engineering/development work in complying with NIST 800-53, HIPPA, ISO 20000-1 frameworks.</li><li>
Federal government contracting experience supporting complex, multi-system environments, preferably within health, civilian, or defense agencies.</li><li>
Advanced or senior-level industry security certifications, such as: CISSP, CISM, CRISC, or GIAC (GSEC, GCSA, GPEN).</li><li>
Cloud security and architecture certifications, including: AWS Certified Security &ndash; Specialty, AWS Solutions Architect, CCSP or CCSK.</li><li>
DevSecOps, automation, or platform security certifications, such as: Kubernetes Security (CKS), GitHub Advanced Security or equivalent.</li><li>
Offensive or advanced technical security certifications, including: OSCP, CEH, GPEN, GWAPT, or similar.</li><li>
Experience securing SaaS platforms from both a governance and direct developer level, with preference for Salesforce GovCloud, including roles, profiles, permission sets, MFA, OAuth, and third-party monitoring tools.</li><li>
Experience designing or maintaining security dashboards and executive-level metrics for visibility into vulnerabilities, compliance posture, access reviews, and risk trends.</li><li>
Experience facilitating incident response activities, tabletop exercises, and driving lessons learned into measurable, continuous improvement.</li><li>
Demonstrated ability to mentor engineers and product teams on secure development practices, threat modeling, and evolving security risks.</li></ul>
Location: Leesburg, VA
Work arrangement: 100% Remote
Why CORMAC?
At CORMAC, we leverage the power of Data Management and Analytics to enable our customers to achieve their strategic goals. With over 20 years of experience in Health Information Technology (HIT), human-centered design principles and Agile development methodologies, CORMAC delivers complex digital solutions to solve some of the most challenging problems facing public healthcare programs today.
As a US Federal Government contractor in the public healthcare sector, our work is impactful and cutting-edge while being performed in a supportive, collaborative, and welcoming environment. We offer flexible work schedules with remote, hybrid, or fully in-person workplace options to empower our employees to decide the workplace most suitable for them. At CORMAC, we have a highly diverse workforce, and believe the work environment is a place where creativity, collaboration, enthusiasm, and innovation happens, regardless of location.
E-Verify Participation/EEO
As an Equal Employment Opportunity employer, CORMAC provides equal employment opportunity to all employees and applicants without regard to an individual's protected status, including race/ethnicity, color, national origin, ancestry, religion, creed, age, gender, gender identity/expression, sexual orientation, marital status, parental status, including pregnancy, childbirth, or related conditions, disability, military service, veteran status, genetic information, or any other protected status.</div>

Security Compliance Engineer

Picogrid

<div>Who we are
Picogrid is a leading venture-backed defense technology company founded to bridge the decades-long gap between modern technology and the critical demands of national security. Today, we're building the essential infrastructure to unify sensors, autonomy, and operators with our technology deployed in active operations around the world. Our mission is to deliver an operational advantage to secure the United States and its allies.<h2 class="jobSectionHeader">
About The Role</h2>
The Cybersecurity Engineer (Jr to Mid level) at Picogrid is responsible for implementing and operating security and compliance controls for internal systems (CMMC L2), cloud services (FedRAMP High), and product platforms (NIST RMF). This role focuses on operationalizing federal security requirements, documentation, continuous monitoring, and coordinating with various engineering and IT teams to ensure compliance and support product deployment.<h2 class="jobSectionHeader">
Required Qualifications</h2><ul><li>
2+ years of experience in cybersecurity, information security, compliance, or system security roles.</li><li>
Experience working with security controls within enterprise IT systems, cloud environments, or regulated product environments.</li><li>
Working knowledge of federal or industry security frameworks such as NIST SP 800-53, NIST SP 800-171, CMMC, FedRAMP, or ISO 27001.</li><li>
Understanding of common security control areas including access control, vulnerability management, system hardening, logging, and configuration management.</li><li>
Familiarity with vulnerability management processes and compliance monitoring practices.</li><li>
Basic familiarity with enterprise or cloud system environments.</li><li>
Experience working with compliance or security assessment tools such as STIG Viewer, SCAP, Nessus, or similar vulnerability scanning tools.</li><li>
Familiarity with DISA STIGs, CIS benchmarks, or other configuration baseline standards.</li><li>
Experience supporting security documentation or compliance evidence collection.</li></ul><h2 class="jobSectionHeader">
Preferred Qualifications</h2><ul><li>
Background supporting FedRAMP authorization environments.</li><li>
Familiarity with CMMC Level 2 or NIST SP 800-171 compliance programs.</li><li>
Hands-on with RMF authorization processes (IATT, ATO, Authority to Connect).</li><li>
Prior work with defense, national security, or federal government customers.</li><li>
Proficiency applying DISA STIG or CIS hardening standards.</li><li>
Background securing embedded systems, edge devices, or hardware-integrated platforms.</li><li>
Track record building automated compliance monitoring or continuous monitoring pipelines.</li><li>
Background supporting vulnerability remediation and POA&amp;M management for regulated systems.</li><li>
Bachelor's degree in Cybersecurity, IT, or related field.</li><li>
Security certifications such as Security+, CISSP, CCSP, or similar.</li><li>
Proficiency with container security, Kubernetes security, or cloud-native security tools.</li><li>
Familiarity with secure device configuration, firmware security, or platform hardening.</li><li>
Background integrating security validation or compliance checks into CI/CD pipelines.</li></ul><h2 class="jobSectionHeader">
Compensation &amp; Benefits</h2><ul><li>
Base salary range: $130,000- $180,000 per year. Base salary is just one part of your total compensation package at Picogrid.</li><li>
Significant stock options with a high potential upside as an early-stage company</li><li>
401(k) with employer matching</li><li>
Full health coverage (medical, dental, and vision insurance)</li><li>
Relocation assistance provided (if applicable)</li><li>
Unlimited PTO (two-week minimum) and 11 paid holidays per year</li><li>
Paid parental leave for both parents</li><li>
Lunch provided when working in-office and a fully stocked kitchenette</li><li>
Free EV charging at the HQ</li><li>
Unique office in El Segundo, CA stocked with quality coffee, snacks, and craft beer</li></ul>
Export Control Requirements
To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. &sect; 1157, or (iv) Asylee under 8 U.S.C. &sect; 1158, or be eligible to obtain the required authorizations from the U.S. Department of State.
Compensation Range: $130K - $180K</div>

Cybersecurity Engineer

Starlink Qatar

<div>
 
 We are seeking a
 
 Compliance Officer
 
 to lead and support cybersecurity, governance, and risk management initiatives across digital platforms and smart solutions. The role will focus on
 
 establishing, monitoring, and improving security and privacy practices
 
 , ensuring alignment with industry standards, international regulations, and organizational objectives. The Compliance Officer will serve as a focal point for all cybersecurity-related tasks, collaborating with internal teams, government stakeholders, and technology partners to build a robust cybersecurity framework and enhance security awareness across all platform operations.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 Governance &amp; Audit
 
 
 <ul>
 <li>
 Review and assess existing governance models, structures, and processes; define the baseline for compliance and security engagement activities.
 </li>
 <li>
 Define the targeted level of governance maturity and perform gap analysis against industry frameworks, standards, and models.
 </li>
 <li>
 Identify inconsistencies, overlaps, and gaps in governance structures and processes; map current operations and propose improvements.
 </li>
 <li>
 Develop a
 
 Plan of Action
 
 outlining prioritized activities, deliverables, and milestones to achieve the target state of the security framework.
 </li>
 </ul>
 
 
 Policy Enablement
 
 
 <ul>
 <li>
 Implement and enforce security policies across key areas such as
 
 Digital Identification, Global Security, Information Classification, IoT Security, and Organizational Governance
 
 .
 </li>
 <li>
 Ensure policies are applied consistently to platform use cases and services.
 </li>
 <li>
 Collaborate with technology partners on defining
 
 Cloud-based Security Control Frameworks
 
 to facilitate policy compliance and adoption.
 </li>
 </ul>
 
 
 Awareness &amp; Training
 
 
 <ul>
 <li>
 Develop and maintain an
 
 ongoing security awareness program
 
 for platform operators and key personnel.
 </li>
 <li>
 Assemble and manage the Security Awareness Team, defining roles, responsibilities, and training requirements for stakeholders at all levels.
 </li>
 <li>
 Deliver training content focused on policies, standards, procedures, and best practices to ensure high-level, daily security awareness.
 </li>
 </ul>
 
 
 Risk Management
 
 
 <ul>
 <li>
 Maintain and refresh the
 
 risk register
 
 , identifying points of risk acceptance, escalation paths, and ownership.
 </li>
 <li>
 Establish the organization&rsquo;s
 
 risk appetite
 
 and perform risk identification, analysis, and documentation.
 </li>
 <li>
 Support continuous improvement of security operations by providing guidelines for governance, controls, and situational awareness.
 </li>
 </ul>
 
 
 Privacy &amp; Regulatory Compliance
 
 
 <ul>
 <li>
 Maintain expertise in
 
 regulatory frameworks
 
 such as GDPR, HIPAA, FFIEC, PCI, and CJIS.
 </li>
 <li>
 Map services and processes to these regulations to ensure
 
 information integrity, confidentiality, and availability
 
 .
 </li>
 <li>
 Support privacy-related activities in coordination with incident management to detect unauthorized access, enforce protective measures, and manage potential data leaks.
 </li>
 </ul>
 
 
 
 
 
 Skills &amp; Abilities
 
 
 <ul>
 <li>
 Excellent interpersonal, communication, and presentation skills.
 </li>
 <li>
 Strong customer orientation and ability to engage multiple stakeholders.
 </li>
 <li>
 Solid understanding of
 
 technology, cybersecurity frameworks, and relevant solutions
 
 .
 </li>
 <li>
 Ability to analyze complex risk and compliance scenarios and provide actionable recommendations.
 </li>
 <li>
 Knowledge of industry best practices in governance, security, privacy, and risk management.
 </li>
 </ul>
</div>

Compliance Officer

Search 10000+ Security compliance specialist jobs near you this March. New roles added regularly across leading industries. Apply today.