Remote ISSO: Security Risk & Compliance Leader

Maximus; Denver (CO); Remote; USD 130,000 - 145,000; Full time

Benefits offered by this job

Equal opportunity employer

Remote work option

Job summary

Maximus is seeking an Information System Security Officer. This remote role focuses on safeguarding information across assigned business areas by applying NIST 800-53r5 controls and managing audits and certifications.

You will collaborate with security teams to improve processes, address vulnerabilities, and ensure regulatory compliance. Ideal candidates have a bachelor’s degree and 7+ years of related experience, with strong knowledge of ARC-AMPE standards and IRS 1075 requirements.

Qualifications

• Bachelor’s degree plus 7+ years of relevant professional experience required, or equivalent combination.
• Clearance eligibility per the job requisition due to sensitive external work.
• Knowledge of NIST 800-53r5 security and privacy controls.
• Experience leading audits and assessments (NIST 800-53, SOC 2).

Responsibilities

• Ensure information security for an assigned area of business focusing on key risks as per policy.
• Conduct information security risk assessments and compliance evaluations per required timelines.
• Ensure controls are implemented to address identified risks for the area.
• Define and maintain documentation for certification and accreditation.
• Lead audits and client reviews of security posture and track remediation items.
• Manage expectations with stakeholders and promote security awareness.

Skills

NIST 800-53r5 controls

SOC 2 audits

IRS 1075 security requirements

Vulnerability management

AWS security controls

Third-Party Risk Management

Education

Bachelor’s degree

Tools

Vulnerability scanning tools

CMS ARC-AMPE tooling

Job description

Maximus is seeking an Information System Security Officer. This remote role focuses on safeguarding information across assigned business areas by applying NIST 800-53r5 controls and managing audits and certifications.

You will collaborate with security teams to improve processes, address vulnerabilities, and ensure regulatory compliance. Ideal candidates have a bachelor’s degree and 7+ years of related experience, with strong knowledge of ARC-AMPE standards and IRS 1075 requirements.