Negotiable
Undetermined
Remote
Remote or South Carolina
Summary: CCS Global Tech is seeking a Security Architect - Consultant to enhance their service portfolio and support their government accounts in the San Francisco bay area. The role involves interviewing stakeholders, developing security implementation plans, and ensuring compliance with established controls. The ideal candidate will have extensive experience in information security and compliance, along with strong communication skills. This position offers the opportunity to work with a skilled internal team and contribute to a rapidly growing IT company.
Key Responsibilities:
- Interviewing business and technical owners to determine policies and procedures used for each agency process.
- Developing and tracking infosec implementation plan progress.
- Documenting information gathered during both interviews and document reviews to assist with developing formal process and procedures.
- Assessing agency documentation to ensure adequate approaches are used to comply with controls.
Key Skills:
- 10+ Years of Experience in Information Security and Compliance.
- 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer.
- Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience).
- Prior Experience POA&M or CAP.
- Strong Communication Experience.
- Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience).
- Bachelor's Degree - field of study is open, but the degree must be complete and verifiable.
- Ability to identify, map and re-engineer business processes.
- Strong schedule management and resource planning skills.
- Ability to work at a high-volume and fast pace.
- Strong collaborator and strong ability to meet deadlines.
Salary (Rate): undetermined
City: undetermined
Country: undetermined
Working Arrangements: remote
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
Roles/Responsibilities:
Duties include, but are not limited to:
- Interviewing business and technical owners to determine policies and procedures used for each agency process.
- Developing and tracking infosec implementation plan progress.
- Documenting information gathered during both interviews and
- Document reviews to assist with developing formal process and procedures.
- Assessing agency documentation to ensure adequate approaches are used to comply with controls
Mandatory Skill:
- 10+ Years of Experience in Information Security and Compliance.
- 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer
- Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience)
- Prior Experience POA&M or CAP.
- Strong Communication Experience.
- Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience)
- Bachelor's Degree - field of study is open, but the degree must be complete and verifiable
- Ability to identify, map and re- engineer business processes.
- Strong schedule management and resource planning skills.
- Ability to work at a high-volume and fast pace.
- Strong collaborator and strong ability to meet deadlines.
Desirable Skills:
- Have completed an information security plan or system security plan notebook.
- Simultaneously, manage multiple infosec work efforts.
- Knowledge of IRS 1075, HIPAA, CJIS, MARS-E and/or PCI-DSS.
- Government sector experience
- CISA, GSLC, or equivalent certification