Remote Information Security Officer — Risk & Compliance Lead

Maximus; Austin (TX); Remote; USD 130,000 - 145,000; Full time

Job summary

Maximus is seeking an Information System Security Officer. This position is remote and focuses on risk management, compliance, and certification of information systems.

The role requires robust experience with NIST controls, audits, and security programs across AWS and third-party risk management. The candidate will collaborate with IS teams and lead remediation of audit findings while promoting security awareness.

Qualifications

• Bachelor’s degree and 7+ years of relevant professional experience required, or equivalent combination of education and experience.
• Must meet clearance eligibility as per the job requisition information.

Responsibilities

• Ensure information security for an assigned Business/Project area following policy under IS management.
• Conduct risk assessments and compliance evaluations for infrastructure and applications.
• Ensure controls are implemented to address identified risks.
• Develop and maintain certification/ accreditation documentation.
• Lead and support audits and client security reviews; track remediation of findings.
• Manage stakeholder expectations on security programs with IS team.
• Promote information security awareness across the organization.
• Collaborate on process improvements and secure design of MAXIMUS assets.

Skills

NIST 800-53r5

ARC-AMPE security standard

IRS 1075 security requirements

Vulnerability management

NIST 800-53 & SOC 2 audits

AWS security controls

Third Party Risk Management

Education

Bachelor’s degree in a related field

Tools

AWS security controls and services

Job description

Maximus is seeking an Information System Security Officer. This position is remote and focuses on risk management, compliance, and certification of information systems.

The role requires robust experience with NIST controls, audits, and security programs across AWS and third-party risk management. The candidate will collaborate with IS teams and lead remediation of audit findings while promoting security awareness.