Remote ISSO — Risk & Compliance Lead

Maximus; United States; Remote; USD 130,000 - 145,000; Full time

Job summary

Maximus is seeking an Information System Security Officer. This remote role focuses on maintaining information security across assigned areas, performing risk assessments, and ensuring regulatory compliance.

You will lead audits, coordinate remediation, and promote security awareness across the organization, collaborating with the Security team to improve processes and recertify MAXIMUS assets.

Qualifications

• Bachelor’s degree and 7+ years of relevant professional experience required, or equivalent combination of education and experience.
• Working knowledge of NIST 800-53r5 security and privacy controls.
• Knowledge of CMS ARC-AMPE security standard.
• Knowledge of IRS 1075 security requirements.
• Experience leading NIST 800-53 and AICPA SOC 2 security audits and assessments.
• Experience with AWS security controls and services.
• Experience with Third Party Risk Management, with an emphasis on cloud solutions (e.g., SaaS).

Responsibilities

• Responsible for ensuring information security for an assigned area of Business/Project focusing on key areas of risk, as outlined in the Information Security policy, under the direction of the Information Security management team.
• Conduct Information Security risk assessments and compliance evaluations for infrastructure and application assets within required timeframes and to industry standards and regulatory specifications.
• Ensure controls are properly and fully implemented to address identified Information Security risks for assigned area of responsibility.
• Define, create and maintain the documentation for certification and accreditation of each information system in accordance with regulatory requirements.
• Lead and support audits and client reviews of security posture; coordinate the collection, review and submission of Information Security deliverables and track the remediation of audit findings and exceptions.
• Manage expectations with multiple stakeholders on projects and programs in conjunction with the Information Security team.
• Promotion of Information Security awareness through various communication channels within the organization.
• Collaborate with the Information Security team members on process improvements, secure design and recertification of MAXIMUS assets.

Skills

NIST 800-53r5

CMS ARC-AMPE

IRS 1075

Vulnerability management

AWS security controls

Third-party risk management

Education

Bachelor's degree

Tools

AWS security services

Security auditing tools

Job description

Maximus is seeking an Information System Security Officer. This remote role focuses on maintaining information security across assigned areas, performing risk assessments, and ensuring regulatory compliance.

You will lead audits, coordinate remediation, and promote security awareness across the organization, collaborating with the Security team to improve processes and recertify MAXIMUS assets.