Information SME - IT security/Los Angeles, CA

Key Responsibilities:

" Support the Risk Management Framework (RMF) processes and system authorization lifecycle

" Experience with GRC platforms (ServiceNow GRC)

" Create systems baseline using NIST 800-53 security controls.

" Develop, review, and maintain security documentation (SSPs, POA&Ms, Policies and procedures, etc.)

" Perform security control assessments and validation activities

" Ensure compliance with NIST, ISO 27001, PCI, TSA and applicable regulatory frameworks

" Conduct vulnerability assessments and track remediation efforts through risk registry.

" Work with system owners to identify, document, and mitigate risks

" Monitor systems for compliance with security baselines and policies

" Support audit readiness and respond to audit findings

" Coordinate incident response activities and ensure proper reporting

" Provide security guidance and awareness to stakeholders

" Prepare and deliver regular status and risk reports

" Collaborate with cross-functional teams to strengthen security posture

Qualifications

" Proven experience as an Information System Security Officer (ISSO) or similar cybersecurity role

" Strong knowledge of NIST RMF (CSF, 800-53) and related standards

" Experience with security compliance frameworks NIST CSF 2.0, NIST 800-53 and NIST SP 800-161

" Familiarity with vulnerability management tools and security assessment methodologies

" Knowledge of cloud security (Azure, AWS, or GCP) is a plus

" Strong understanding of network, application, and data security principles

" Relevant certifications preferred (e.g., CISSP, CISM, CISA, Security+)

" Excellent analytical, documentation, and communication skills

" Ability to work effectively with both technical and non-technical stakeholders