Federal Security Compliance Specialist

Supermicro; San Jose (CA); Sur place; USD 133 000 - 165 000; Plein temps

Avantages offerts par ce poste

Benefits package

Résumé du poste

Supermicro is seeking a Security Compliance Industry Specialist to drive federal compliance execution, security assurance, and audit readiness for SMCI Federal. You will own the SSP/POA&M, manage incident response readiness, and validate controls across GCC High and SMCI systems to meet NIST 800-171 and ITAR requirements.

The role performs independent validation of security controls, collaborates with Facilities, HR, and Security, and helps prepare assessment-ready artifacts for upcoming audits.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 5+ years of hands-on security risk management, compliance auditing, or technical GRC execution in a regulated environment.
• Direct experience managing NIST SP 800-171, CMMC Level 2, DFARS, and ITAR compliance frameworks.
• Familiarity with physical security control requirements as they apply to controlled facilities.
• Excellent written communication for SSPs, POA&Ms, and audit artifacts.

Responsabilités

• Drive day-to-day federal compliance execution, security assurance, and audit readiness for SMCI Federal.
• Own, update, and maintain SSP and POA&M, closing control gaps against SLAs.
• Lead incident response readiness and annual tabletop exercises; report security events quickly and accurately.
• Validate shared-responsibility controls delivered through GCC High and SMCI-operated systems against NIST 800-171 requirements.
• Establish and administer Technology Control Plans and deemed-export prevention processes.

Connaissances

Security risk management

Compliance auditing

GRC execution

IAM

Formation

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Outils

ServiceNow

Jira

Cloud-based GRC platforms

Description du poste

Supermicro is seeking a Security Compliance Industry Specialist to drive federal compliance execution, security assurance, and audit readiness for SMCI Federal. You will own the SSP/POA&M, manage incident response readiness, and validate controls across GCC High and SMCI systems to meet NIST 800-171 and ITAR requirements.

The role performs independent validation of security controls, collaborates with Facilities, HR, and Security, and helps prepare assessment-ready artifacts for upcoming audits.