IS Security Manager: RMF/NIST Compliance Leader

Cape Henry Associates, Acquired by JANUS Research Group; Lexington (MA); Hybrid; USD 150.000 - 170.000; Vollzeit

Benefits dieser Stelle

Health benefits

Referral bonus

Employee awards

Great Place to Work certification

Zusammenfassung

JANUS Research Group is seeking an Information Systems Security Manager to own the security posture of JANUS corporate and CUI systems. You will manage RMF, NIST SP 800-53/171, and CMMC Level 2 compliance while hands-on securing Microsoft 365, AWS, Windows, Linux, and AD.

This hybrid role coordinates with DCSA, the FSO, MSPs, and leadership to keep systems secure and compliant. You will lead documentation, risk reporting, and end-user cybersecurity training, with strong emphasis on patching,

Qualifikationen

• U.S. Citizenship and ability to obtain or maintain a DoD Security Clearance
• Experience in IT systems, cybersecurity, or compliance
• Knowledge of NIST SP 800-171, CMMC Level 2, and RMF standards
• Interaction with DCSA and security program support requirements
• Microsoft 365 administration (Entra ID, Teams, SharePoint, Exchange)

Aufgaben

• Maintain and update cybersecurity documentation (SSPs, POA&Ms, policies, procedures, user access records).
• Implement and monitor security controls for RMF/NIST 800-171/800-53 and CMMC Level 2.
• Monitor Microsoft 365 suite (Exchange Online, Teams, SharePoint, Entra ID) and findings.
• Lead preparation for CMMC assessments and audits with DCSA and FSO.
• Contribute to security audits, assessments, and continuous monitoring.
• Coordinate end-user cybersecurity and IT training (phishing awareness, acceptable use).
• Support onboarding/offboarding and system access management.
• Assist with patch management, system hardening, and endpoint configuration.
• Own secure development program; run SAST/DAST in CI/CD and triage findings.
• Assess AWS security (GovCloud) and ensure FedRAMP Moderate compliance for CUI.
• Assess Windows/AD security: STIG/CIS baselines, GPO, privileged groups, LAPS, BitLocker.
• Assess Linux security (STIG/CIS) including auditing and hardening; run SCAP scans.

Kenntnisse

RMF knowledge

NIST standards

Security documentation

Communication skills

Tools

Microsoft 365

AWS

Windows

Linux

Active Directory

Snyk

SonarQube

OWASP ZAP

Burp Suite

Terraform

Ansible

Jobbeschreibung

JANUS Research Group is seeking an Information Systems Security Manager to own the security posture of JANUS corporate and CUI systems. You will manage RMF, NIST SP 800-53/171, and CMMC Level 2 compliance while hands-on securing Microsoft 365, AWS, Windows, Linux, and AD.

This hybrid role coordinates with DCSA, the FSO, MSPs, and leadership to keep systems secure and compliant. You will lead documentation, risk reporting, and end-user cybersecurity training, with strong emphasis on patching,