Remote ISSO & Security Operations Lead — NIST/CMMC Expert

Ingram Micro Inc.; Irvine (CA); Remote; USD 150.000 - 210.000; Vollzeit

Zusammenfassung

Ingram Micro Inc. is seeking an experienced ISSO & Security Operations Lead for a remote role based in the United States.

You will own the CUI enclave security posture, maintain the SSP/POA&M, and lead assessments against NIST SP 800-171A while personally operating SIEM during business hours. You will also coordinate the C3PAO certification process, manage SPRS scoring, and supervise incident response, threat hunting, and regulatory reporting activities.

Qualifikationen

• 7+ years in information security / GRC with CUI or regulated environment experience.
• Deep expertise in NIST SP 800-171 Rev. 2 / 800-171A and CMMC 2.0 Level 2.
• Hands-on SSP and POA&M authoring and control-assessment experience.
• Hands-on SIEM experience (BigQuery / Looker) and incident-response execution.

Aufgaben

• Author, own, and maintain the SSP, POA&M, and security policies for the enclave boundary.
• Lead assessments of 110 practices / 320 objectives against NIST SP 800-171A.
• Calculate and maintain the SPRS score and prepare the annual affirmation package.
• Govern Google Workspace security configuration and SIEM telemetry for detection and response.
• Manage the C3PAO certification engagement and coordination with KPMG pre-audit.

Kenntnisse

Information security

Incident response

Threat hunting

SIEM monitoring

Policy writing

NIST SP 800-171A

GRC

Ausbildung

Bachelor's degree or higher in cybersecurity

Tools

BigQuery

Looker

Google Workspace security tools

Jobbeschreibung

Ingram Micro Inc. is seeking an experienced ISSO & Security Operations Lead for a remote role based in the United States.

You will own the CUI enclave security posture, maintain the SSP/POA&M, and lead assessments against NIST SP 800-171A while personally operating SIEM during business hours. You will also coordinate the C3PAO certification process, manage SPRS scoring, and supervise incident response, threat hunting, and regulatory reporting activities.