Remote InfoSec Officer: Risk, Audits & Compliance

Maximus; City of Albany (NY); Remote; USD 130,000 - 145,000; Full time

Job summary

Maximus is seeking an Information System Security Officer to lead security for designated business areas. The role is remote, with responsibilities spanning risk assessments, control implementation, and certification documentation.

You will coordinate audits and client reviews, manage stakeholder expectations, and promote security awareness across the organization. Strong experience with NIST 800-53 controls, audits, AWS security, and third‑party risk management is highly valued.

Qualifications

• Bachelor’s degree and 7+ years of relevant experience, or equivalent.
• Experience with NIST 800-53r5 controls.
• Familiarity with CMS ARC-AMPE security standard.
• Knowledge of IRS 1075 security requirements.
• Experience leading audits and assessments (NIST 800-53, SOC 2).
• Experience with AWS security controls.
• Experience with Third-Party Risk Management (cloud/SaaS).

Responsibilities

• Responsible for ensuring information security for an assigned area of Business/Project focusing on key areas of risk, as outlined in the Information Security policy, under the direction of the Information Security management team.
• Conduct Information Security risk assessments and compliance evaluations for infrastructure and application assets within required timeframes and to industry standards and regulatory specifications.
• Ensure controls are properly and fully implemented to address identified Information Security risks for assigned area of responsibility.
• Define, create and maintain the documentation for certification and accreditation of each information system in accordance with regulatory requirements.
• Lead and support audits and client reviews of security posture; coordinate the collection, review and submission of Information Security deliverables and track the remediation of audit findings and exceptions.
• Manage expectations with multiple stakeholders on projects and programs in conjunction with the Information Security team.
• Promotion of Information Security awareness through various communication channels within the organization.
• Collaborate with the Information Security team members on process improvements, secure design and recertification of MAXIMUS assets.

Skills

NIST 800-53r5

ARC-AMPE

IRS 1075

Vulnerability mgmt

NIST 800-53 audits

SOC 2 audits

AWS security

Third-party risk

Education

Bachelor’s degree

Job description

Maximus is seeking an Information System Security Officer to lead security for designated business areas. The role is remote, with responsibilities spanning risk assessments, control implementation, and certification documentation.

You will coordinate audits and client reviews, manage stakeholder expectations, and promote security awareness across the organization. Strong experience with NIST 800-53 controls, audits, AWS security, and third‑party risk management is highly valued.