Security Compliance Project Manager

Hypori

3d•Remote

About The Position

As the Security Compliance Project Manager, you will manage the process for compliance with government and industry information security standards and affiliated security assessments such as ISO 27001, SOC2, the DoD Cloud Computing Security Requirements Guide (CC SRG) Impact Levels, FedRAMP, and the DoD Cybersecurity Maturity Model Certification (CMMC) program. This includes facilitating security assessments, updating required compliance artifacts and evidence, managing external vendors, identifying issues for resolution, and tracking status for each process.

Requirements

3 years of compliance audit and implementation experience with Government compliance requirements such as DISA SRG Impact Levels, FedRAMP, and NIST 800-53, NIST 800-171, NIST SP 800-37, ISO 27001, SOC2, HIPAA and US Government ATOs.
High proficiency with software tools such as productivity and project management tools.
Applicants selected for this position must be a US citizen with a Secret security clearance with eligibility to obtain a DoD Top Secret clearance with Tier 5 background investigation.

Nice To Haves

Self-starting, independent, and results driven professional
Ability to clearly convey compliance requirements to internal engineering teams and associated implementation to external customers using effective written and verbal communication skills
Excellent interpersonal skills and the ability to work as part of a team.
Strong problem solving and creative skills and the ability to exercise sound judgment and make decisions based on accurate and timely analyses.

Responsibilities

Manage and maintain version control of all documentation related to compliance for each standard and track the implementation status of every security control either using government systems such as eMASS or internal databases.
Oversee preparation and execution of external compliance audits.
Support mapping of compliance requirements to security control implementation using the company requirements generation and agile development processes.
Maintain Documentation and other compliance artifact.
Organize and maintain continuous monitoring data, vulnerability scans and POA&Ms reports for external agencies.
Contribute to vulnerability and risk reports to the CSO and Senior Leadership.