ISSO Program Manager

This is a fully remote position, open to applicants in Alabama, +29 more states.

📋 Description

• Lead activities related to the Risk Management Framework and ensure the system's Authorization to Operate is maintained.

• Supervise security controls, conduct risk assessments, oversee continuous monitoring, and manage incident response.

• Provide guidance to CMS stakeholders regarding the program's security and privacy status.

• Act as an Information System Security Officer (ISSO) to support the implementation and maintenance of information security controls for designated OEDA systems.

• Offer security engineering assistance for cloud-based and managed service environments authorized by CMS.

• Support the Authorizing Official and the Authorizing Official Designated Representative in making risk-based authorization decisions.

• Perform security event logging, vulnerability scanning, and configuration management tasks.

• Advise the Program ISSO on matters related to information system security and privacy.

• Ensure compliance of security and privacy controls with agency, departmental, and federal regulations.

• Facilitate the development of security documentation and the implementation of security and privacy controls.

• Collaborate with engineering teams, program leadership, and federal stakeholders to enhance security posture and provide secure digital services.

⛳️ Requirements

• A Bachelor's degree is required.

• Minimum of 7 years of relevant experience.

• Over 7 years of experience in cybersecurity with a focus on federal contracts.

• Familiarity with custom software or cloud infrastructure programs/projects.

• Experience as a federal security officer.

• Background in working with or for government agencies.

• Understanding of government contracting, compliance, and audit trails.

• Proven experience in leading and developing agile teams and managing large-scale projects.

• Experienced in directing large, complex projects with significant milestones, dependencies, integrations, risks, and uncertainties.

• Proficient in Scrum, Kanban, or SAFe methodologies along with continuous integration and continuous delivery practices.

• Skills in strategic delivery planning and contract management.

• Exceptional written and verbal communication skills.

• Legal authorization to work in the United States is required.

• Capability to meet government contract requirements.

• Work authorization that does not require visa sponsorship now or in the future.

• May be required to undergo a government background check or security clearance.

• CISSP, CISM, or CompTIA Security+ certifications are highly preferred but not mandatory.

🏝️ Benefits

• Comprehensive medical, dental, and vision coverage.

• Disability, life, and accidental death insurance provided at no cost.

• Paid vacation, holidays, and floating holidays.

• 12 paid federal holidays annually.

• Performance-based annual bonus available for eligible employees.

• Paid parental leave with weekly meal delivery to your home.

• Wellness program offering physical, mental, and emotional health resources.

• Virtual doctor visits with no copay, subject to provider availability.

• Sabbatical leave offered after continuous service.

• 401(k) plan with a 4% salary match.

• Flexible, remote-first work environment.

• Company-provided laptop and assistance with home office setup.

• Monthly reimbursement for eligible home office utility expenses.

• Access to internal training programs and professional development resources.

• LinkedIn Learning access along with an annual allowance for courses, tuition, and certifications.

• Referral bonuses available.

• Pre-tax commuter programs offered where applicable.

• A collaborative and remote-friendly team environment.