Security Manager

This is a fully remote position, open to applicants in Texas.

📋 Description

• Provide leadership in security across the contract, encompassing security policy, procedures, planning, evaluation, technology, compliance, incident management, vulnerability management, and GRC.

• Collaborate with the Technical Director.

• Maintain overall responsibility for security policy, procedures, planning, evaluation, and technology.

• Monitor, address, and report on existing and emerging threats and trends to the DIR.

• Work alongside the Technical Director and DIR to tackle current and anticipated future threats.

• Offer compliance oversight for TX-RAMP Level 2, TAC 202, CJIS, IRS Publication 1075, and MARS-E.

• Organize the annual SOC 2 Type 2 audit.

• Manage corrective action plans for SOC 2 Type 2.

• Monitor, report, and address security incidents in line with TAC Chapter 202.

• Create the annual security plan.

• Integrate security efforts with GRC processes.

• Supervise vulnerability scanning.

• Perform quarterly Master Security Baseline Configuration Health Checks.

• Ensure security governance and accountability within a complex multi-vendor government IT environment.

• Collaborate with technical and service delivery leadership on security risks, remediation, compliance, and emerging threats.

• Provide leadership and oversight in areas such as FedRAMP Moderate, CJIS Security Policy, IRS Publication 1075, MARS-E, SOC 2 Type 2, zero-trust architecture, SIEM/threat hunting, incident response, vulnerability management, and GRC.

⛳️ Requirements

• Candidates must reside in the Austin, TX metropolitan area, or San Angelo, TX as applicable, or be willing to relocate to the Austin, TX metropolitan area.

• A minimum of 10 years of experience, which may include supervisory or lead roles.

• At least 8 years of experience in cybersecurity leadership on government IT contracts.

• Required compliance experience with TX-RAMP Level 2 or an equivalent FedRAMP Moderate standard.

• Proven experience with TAC Chapter 202 and Texas state cybersecurity requirements.

• Experience with compliance related to CJIS Security Policy, including personnel management and data security.

• Management experience regarding SOC 2 Type 2 audits and corrective actions.

• Demonstrated experience in the design and implementation of zero-trust architecture.

• Familiarity with security incident response, threat hunting, and SIEM management.

• Experience operating within multi-vendor government IT environments.

• Strong background in cybersecurity governance, risk management, compliance, architecture, and security operations.

• Ability to effectively communicate security risks, incidents, remediation efforts, and compliance status to senior government and technical stakeholders.

• CISSP certification required; CISM is acceptable in lieu of CISSP.

• Certification in CJIS Security Addendum compliance or equivalent experience.

• Must be a US Citizen.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with company matching.

• Opportunities for professional development and advancement.