W2 contract || SME IT Security

Key Responsibilities

• Support the Risk Management Framework (RMF) processes and system authorization lifecycle
• Experience with GRC platforms (ServiceNow GRC)
• Create systems baseline using NIST 800-53 security controls
• Develop, review, and maintain security documentation (SSPs, POA&Ms, Policies and procedures, etc.)
• Perform security control assessments and validation activities
• Ensure compliance with NIST, ISO 27001, PCI, TSA and applicable regulatory frameworks
• Conduct vulnerability assessments and track remediation efforts through risk registry
• Work with system owners to identify, document, and mitigate risks
• Monitor systems for compliance with security baselines and policies
• Support audit readiness and respond to audit findings
• Coordinate incident response activities and ensure proper reporting
• Provide security guidance and awareness to stakeholders
• Prepare and deliver regular status and risk reports
• Collaborate with cross-functional teams to strengthen security posture

Qualifications

• Proven experience as an Information System Security Officer (ISSO) or similar cybersecurity role
• Strong knowledge of NIST RMF (CSF, 800-53) and related standards
• Experience with security compliance frameworks NIST CSF 2.0, NIST 800-53 and NIST SP 800-161
• Familiarity with vulnerability management tools and security assessment methodologies
• Knowledge of cloud security (Azure, AWS, or GCP) is a plus
• Strong understanding of network, application, and data security principles
• Relevant certifications preferred (e.g., CISSP, CISM, CISA, Security+)
• Excellent analytical, documentation, and communication skills
• Ability to work effectively with both technical and non-technical stakeholders