Security Compliance Lead for FedRAMP & FISMA

Phoenix Data Corporation; Indianapolis (IN); On-site; USD 85,000 - 95,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) with company contribution

Health Savings Account (HSA)

Life Insurance

Critical Illness & Accident coverage

Generous PTO & Paid Holidays

Job summary

Phoenix Data Corporation seeks a Compliance Officer in Indianapolis, IN to lead security engineering efforts focused on FedRAMP and FISMA ATO processes. The ISSE will work with system owners, developers, assessors, and government stakeholders to ensure security controls are implemented and maintained.

Candidates should have CISSP, CAP, CCSP, or CISM certifications, experience with FedRAMP platforms and US government customers, and eligibility for Public Trust clearance.

Qualifications

• Experience in system security engineering for FedRAMP and FISMA ATO processes and audits.
• Must be a US Citizen.
• Strong communication and collaboration with stakeholders.

Responsibilities

• Serve as the technical lead for system security engineering efforts supporting FISMA and FedRAMP ATOs and audits
• Develop and maintain System Security Plans (SSP), Plan of Action and Milestones (POA&Ms), Continuous Monitoring Plans
• Conduct security control implementation and provide guidance on NIST 800-53, NIST 800-171, CMMC, FedRAMP controls
• Lead or support risk assessments, vulnerability assessments and gap analyses
• Participate in security control validation testing and collaborate with Third-Party Assessment organizations
• Ensure compliance with security policies, standards, and procedures
• Engage in continuous monitoring activities

Skills

Security engineering leadership

FedRAMP and FISMA experience

Experience with US government clients

Education

Bachelor’s degree or equivalent work experience

Job description

Phoenix Data Corporation seeks a Compliance Officer in Indianapolis, IN to lead security engineering efforts focused on FedRAMP and FISMA ATO processes. The ISSE will work with system owners, developers, assessors, and government stakeholders to ensure security controls are implemented and maintained.

Candidates should have CISSP, CAP, CCSP, or CISM certifications, experience with FedRAMP platforms and US government customers, and eligibility for Public Trust clearance.