SoSC - Security Architect Consultant - 11518

RICEFW Technologies Inc; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

RICEFW Technologies Inc. seeks an experienced information security and compliance professional in the United States to lead policy development and audit readiness. You will interview owners, map controls, and drive the implementation progress across agency processes.

The role requires deep knowledge of NIST 800-53, POA&M/CAP experience, and strong communication skills. Prior government sector exposure is preferred and familiarity with Archer or similar GRC tools is a plus.

Qualifications

• 10+ years of information security and compliance experience.
• 2+ years auditing with a standard control framework as auditor or info system security officer.
• Strong knowledge of NIST 800-53 (2+ years).
• Experience with POA&M or CAP.
• Strong communication skills.
• 3+ years using a GRC tool such as Archer or similar.

Responsibilities

• Interview business and technical owners to determine policies and procedures used for each agency process.
• Develop and track infosec implementation plan progress.
• Document information gathered during interviews and document reviews to assist with developing formal processes and procedures.
• Assess agency documentation to ensure adequate approaches comply with controls.

Skills

Information Security

Compliance

Auditing

NIST 800-53

POA&M/CAP

Communication

GRC Tool (Archer)

Process Mapping

Education

Bachelor’s Degree

Tools

Archer or Similar

Job description

Daily Duties / Responsibilities:

Duties include, but are not limited to:

• Interviewing business and technical owners to determine policies and procedures used for each agency process.
• Developing and tracking infosec implementation plan progress.
• Documenting information gathered during both interviews and
• Document reviews to assist with developing formal process and procedures.
• Assessing agency documentation to ensure adequate approaches are used to comply with controls.

Required skills (must include years of experience, in order of importance)

• 10+ Years of Experience in Information Security and Compliance.

• 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer
• Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience)
• Prior Experience POA&M or CAP.
• Strong Communication Experience.
• Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience)

Preferred Skills (Rank in order of Importance):

• Have completed an information security plan or system security plan notebook.
• Simultaneously, manage multiple infosec work efforts.
• Knowledge of IRS 1075, HIPAA, CJIS, MARS-E

and/or PCI-DSS.

• Government sector experience

Additional Skills

• Ability to identify, map and re- engineer business processes.
• Strong schedule management and resource planning skills.
• Ability to work at a high-volume and fast pace.
• Strong collaborator and strong ability to meet deadlines.

Required Education:

Bachelor’s Degree

Preferred Certifications:

• CISA, GSLC, or equivalent certification