FedRAMP ISSO | Cloud Security & Compliance Lead

Talent Octopusventures; City Of London; Vor Ort; GBP 85.000 - 142.000; Vollzeit

Zusammenfassung

LexisNexis Risk Solutions is seeking an experienced Information System Security Officer (ISSO) to lead and maintain the security posture of our FedRAMP-authorized cloud environment. You will partner with Engineering, Cloud Operations, DevOps, Product, and Compliance to ensure ongoing authorization and drive security improvements.

The role requires hands-on experience with FedRAMP, NIST 800-53, FISMA, and cloud platforms such as AWS, Azure, or GCP.

Qualifikationen

• 5+ years of information security, cybersecurity, or compliance experience.
• 3+ years supporting FedRAMP, FISMA, or federal compliance programs.
• Experience maintaining FedRAMP Moderate or High authorized environments.
• Experience supporting security assessments, audits, and continuous monitoring activities.
• Experience with cloud platforms such as AWS, Azure, or Google Cloud.

Aufgaben

• Serve as the designated ISSO for FedRAMP-authorized systems.
• Maintain the organization's Authority to Operate (ATO) and support ongoing compliance activities.
• Lead FedRAMP continuous monitoring activities, including monthly, quarterly, and annual reporting requirements.
• Coordinate annual assessments, independent audits, penetration testing, and security reviews with 3PAOs.
• Manage security-related communications with federal agencies, sponsoring organizations, and stakeholders.

Ausbildung

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field

Tools

SIEM

Vulnerability scanners

EDR

IAM

Cloud security services

Jobbeschreibung

LexisNexis Risk Solutions is seeking an experienced Information System Security Officer (ISSO) to lead and maintain the security posture of our FedRAMP-authorized cloud environment. You will partner with Engineering, Cloud Operations, DevOps, Product, and Compliance to ensure ongoing authorization and drive security improvements.

The role requires hands-on experience with FedRAMP, NIST 800-53, FISMA, and cloud platforms such as AWS, Azure, or GCP.