Remote Principal ISSO & Security Operations Lead

Ingram Micro Inc in; Irvine (CA); Remote; USD 133,000 - 227,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Parental leave

401(k) plan and company match

Short-term disability coverage

Long-term disability coverage

Basic life insurance

Wellbeing benefits

Job summary

Ingram Micro Inc. seeks a seasoned ISSO & Security Operations Lead to own the CUI enclave security posture, including SSP/POA&M maintenance, control assessments, and SPRS scoring.

You will drive C3PAO engagements, manage Google Workspace security, and lead 24/7 monitoring and incident response for regulatory reporting. The role requires hands-on SIEM experience (BigQuery/Looker), deep NIST/CMMC expertise, and the ability to coordinate with third-party assessors.

Qualifications

• Bachelor’s degree or higher in cyber security, computer science/engineering, MIS or similar degrees.
• 7+ years in information security / GRC, with demonstrable CUI or regulated-environment experience.
• Deep, current expertise in NIST SP 800-171 Rev. 2 / 800-171A and CMMC 2.0 Level 2.
• Hands-on SSP and POA&M authoring and control-assessment experience (design and operating effectiveness, sampling).
• Hands-on SIEM experience (BigQuery / Looker or comparable), detection engineering, and incident-response / threat-hunting execution — not just oversight.
• Incident-response coordination experience and strong security policy / procedure writing skills.
• Ability to support a scheduled on-call rotation for critical incident escalation outside business hours.

Responsibilities

• Author, own, and continuously maintain the SSP, POA&M, and supporting security policies for the enclave boundary.
• Lead assessments of all 110 practices / 320 objectives against NIST SP 800-171A (Test of Design and Operating Effectiveness), including sampling, evidence collection, and gap remediation.
• Calculate and maintain the SPRS score; prepare the senior-official annual affirmation package.
• Govern Google Workspace security configuration — DLP, Vault, Drive labels/IRM, Context-Aware Access, and unified audit logs.
• Manage the C3PAO certification engagement and the KPMG independent design review, build review, and pre-audit (mock C3PAO).
• Maintain the CUI program: marking, handling, decontrol, retention, and DFARS 252.204-7012 flow-down interpretation with the BU.
• Run the annual self-assessment and continuous-monitoring program; track POA&M closure to schedule.
• Perform business-hours monitoring and detection using the SIEM / BigQuery log store over enclave telemetry; serve as the named on-call escalation point for after-hours Sev1/2 alerts.
• Triage alerts, investigate events, and conduct proactive threat hunting.
• Execute incident response per runbooks SOP-LOG-004 and SOP-INC-008.
• Own DIBNet 72-hour incident reporting and coordinate all regulatory notifications.
• Integrate and tune enclave telemetry sources (Workspace audit logs, WorkSpaces, identity, endpoint).
• Maintain detection content, on-call handover documentation, and post-incident lessons-learned records.
• Contribute monitoring evidence for control assessments and continuous monitoring.

Skills

NIST SP 800-171A

NIST SP 800-171 Rev. 2

CMMC 2.0 Level 2

SIEM

Incident response

Threat hunting

Policy writing

On-call rotation

BigQuery

Looker

Education

Bachelor’s degree or higher in cyber security or related field

Tools

BigQuery

Looker

Job description

Ingram Micro Inc. seeks a seasoned ISSO & Security Operations Lead to own the CUI enclave security posture, including SSP/POA&M maintenance, control assessments, and SPRS scoring.

You will drive C3PAO engagements, manage Google Workspace security, and lead 24/7 monitoring and incident response for regulatory reporting. The role requires hands-on SIEM experience (BigQuery/Looker), deep NIST/CMMC expertise, and the ability to coordinate with third-party assessors.