Post job

Head of security work from home jobs

- 45 jobs
  • Head of SEC Reporting

    Coinbase 4.2company rating

    Remote job

    Ready to be pushed beyond what you think you're capable of? At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system. To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems. Our work culture is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be. While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported. Reporting to the Chief Accounting Officer, this role will lead the Company's Financial Reporting function and be an integral component of Finance's risk management and reporting process, driving consistent application of accounting policy and financial reporting across the company. The successful candidate will combine a strong technical skill set with exceptional organizational skills in order to successfully lead quarterly and annual reporting cycles. Further, the candidate will have a positive attitude with a proven ability to thrive successfully in a fast paced multi-task oriented environment. This is a critical and high-profile position that will play a crucial role in financial reporting and other statutory and regulatory filings. What You'll Be Doing (i.e., Job Duties): Lead the preparation of all quarterly and annual filings with the SEC, in accordance with U.S. GAAP and SEC regulations, including preparation of monthly balance sheets, income statements and quarterly statements of stockholders' equity and preparation of disclosures. Assist in coordinating the review and approval of quarterly and annual SEC filings by all relevant parties, including the Disclosure Committee, Audit and Compliance Committee, external auditors, and internal and external legal counsel. Support Investor Relations through tie out and other quality assurance review of their externally published materials, and prepare and file the earnings release 8-K. Prepare the accounting/finance portion of quarterly Disclosure Committee and Audit Committee decks and present at the Disclosure Committee meeting. Lead the Maintain SEC reporting calendar and project manage the SEC reporting process to conform to this calendar, efficiently and effectively coordinating across teams. Coordinate with accounting policy on new accounting standards issued by the FASB and accounting and reporting guidance issued by the SEC to determine the impact to the company's disclosures, including writing position papers as needed. Support management in completing special projects as assigned and be a financial reporting resource for ad-hoc questions and initiatives. Responsible for the coaching, mentoring and management of the SEC reporting team, including across multiple time zones in a mostly asynchronous environment. Ensure SEC reporting processes and disclosures represent best practices, recommending and assisting in the implementation of disclosure and process improvements as appropriate, including simplifying, standardizing, and streamline processes. Perform financial reporting controls, including clear documentation of work/review performed. What We Look For In You (ie. Job Requirements): Strong accounting background with a thorough knowledge of US GAAP, SOX 404 and SEC financial reporting standards. Demonstrated ability to research complex and vague accounting and disclosure rules and clearly and efficiently document related conclusions. Minimum 10+ years of relevant experience. Current or recent senior-level SEC reporting experience is required. Combination of private and public accounting experience strongly preferred. CPA or similar designation required. Excellent written and oral communication skills, including experience presenting to senior-most members of company leadership. Excellent organization, project management, and analytical skills. High level of enthusiasm and curiosity to grow your career in a dynamic and growing company. High energy, positivity, endurance, and resiliency. Ability to communicate across all levels of the organization. Highest levels of integrity and work ethic. Meticulous and impeccable attention to detail while also keeping in mind overall objectives. Demonstrated ability to work autonomously, coordinate the efforts of others and work well with people at a wide range of levels. Experience performing and documenting controls over financial reporting. Familiarity and experience with Workiva's WDesk. Nice to haves Financial Institutions / Fintech background. Prior technical accounting policy leadership experience. Familiarity with NetSuite. Job #: P71089 Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Full time offers from Coinbase also include bonus eligibility + equity eligibility + benefits (including medical, dental, and vision) Base salary range shown. Total compensation also includes equity and bonus eligibility and benefits:$212,200-$212,200 CAD Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying. Commitment to Equal Opportunity Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the Employee Rights and the Know Your Rights notices by clicking on their corresponding links. Additionally, Coinbase participates in the E-Verify program in certain locations, as required by law. Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations[at]coinbase.com to let us know the nature of your request and your contact information. For quick access to screen reading technology compatible with this site click here to download a free compatible screen reader (free step by step tutorial can be found here). Global Data Privacy Notice for Job Candidates and Applicants Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here. By submitting your application, you are agreeing to our use and processing of your data as required. AI Disclosure For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description. For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate. The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment . To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com
    $117k-212k yearly est. Auto-Apply 2d ago
  • *Head of Managed Security

    Zurich Insurance Company Ltd. 4.8company rating

    Remote job

    Zurich Services Corporation (St. Louis, MO) seeks a Head of Managed Security to lead the portfolio of managed cybersecurity services. Specific responsibilities include: manage all service lines and solutions under the Managed Security profit center including Security Operation Center as-a- Service, Managed Security Training and Awareness and Compromise Assessment (15%); conduct continuous self-education to keep abreast of threat landscape and new approaches to counter threats (10%); identify key training opportunities outside technical training of line of service to expand capabilities of team and own budget decisions on training (5%); serve as a point of escalation for threats and identify broader implications of new attack methodologies for clients and the market (10%); own strategic decisions on new software products / upgrades and roll-out and change management approach (10%); devise and execute new service offerings based on market needs, including delivery, pricing and collaboration with marketing on collaterals (15%); own staffing model and drive reallocation of capacity across business lines within managed security (10%); engage directly and regularly with large clients, ensuring quality and timeliness of service is at or superior level than customer expectation (15%); and actively support sales in pitching and negotiating products to prospects (10%). Position requires CompTIA Security+, Network+, and CySA+ certifications. Position requires 20% travel within the U.S. and occasional international travel. Option to work remotely from anywhere in the U.S. with required travel to St. Louis office on quarterly basis. The position requires a Bachelor's degree, or foreign equivalent, in Computer Science, Cybersecurity, Digital Forensics or a closely related field of study, plus 5 years of experience in the job offered or as a SOC Manager, Cyber Security Senior Manager, Security Engineer, Security Analyst, or a similar position in a Managed Security Operations Center. Must have 3 years of experience with each of the following: leading, mentoring, and developing cybersecurity teams, including performance management, skill gap analysis, and fostering a collaborative and high-performance culture; managing complex projects related to security initiatives, technology implementations, or service improvements; building and maintaining strong client relationships, acting as a trusted advisor, managing expectations; working with the lifecycle and operational requirements for maintaining security platforms and tools integral to service delivery; working with security toolsets, including Endpoint Detection and Response (EDR) tools, Extended Detection and Response (XDR) platforms, Identity Threat Detection and Response (ITDR) solutions, Software project management and workflow tools; working with SIEM, SOAR, Cloud Security (CSPM/CWPP), and VA/VM platforms; managing relationships with IT and security vendors and service providers; conveying complex technical concepts to diverse audiences, from engineers to C-level executives; interpreting security data, assessing risks, and evaluating performance metrics; operating based on common business profitability measures; and applying cyber risk management frameworks and methodologies, including NIST Cybersecurity Framework (CSF), NIST Risk Management Framework, NIST SP 800-53 / NIST SP 800-171, ISO/IEC 27001 / 27002 / 27005, MITRE ATT&CK Framework, CIS Controls / CIS Benchmarks, and PCI DSS 4.0. Must have CompTIA Security+, Network+, and CySA+ certifications. Must be willing to travel 20% within the U.S. and occasionally travel internationally. Option to work remotely from anywhere in the U.S. with required travel to St. Louis office on quarterly basis. Full time position. Apply by submitting your resumes at Zurichna.com/en/careers, Job ID: 127900. At Zurich, compensation for roles is influenced by a variety of factors, including but not limited to the specific office location, role, skill set, and level of experience. In compliance with local laws, Zurich commits to providing a fair and reasonable compensation range for each role. For more information about our Total Rewards, please click here. Additional rewards may encompass short-term incentive bonuses and merit increases. We encourage candidates with salary expectations beyond the provided range to apply, as they will be considered based on their experience, skills, and education. The salary indicated represents a nationwide market range and has not been adjusted for geographic differentials pertaining to the location where the position may be filled. The proposed salary range for this position is $181,480. As an insurance company, Zurich is subject to 18 U.S. Code § 1033. A future with Zurich. What can go right when you apply at Zurich? Now is the time to move forward and make a difference. At Zurich, we want you to share your unique perspectives, experiences and ideas so we can grow and drive sustainable change together. As part of a leading global organization, Zurich North America has over 150 years of experience managing risk and supporting resilience. Today, Zurich North America is a leading provider of commercial property-casualty insurance solutions and a wide range of risk management products and services for businesses and individuals. We serve more than 25 industries, from agriculture to technology, and we insure 90% of the Fortune 500. Our growth strategy is not limited to our business. As an employer, we strive to provide ongoing career development opportunities, and we foster an environment where voices are diverse, behaviors are inclusive, actions drive equity, and our people feel a sense of belonging. Be a part of the next evolution of the insurance industry. Join us in building a brighter future for our colleagues, our customers and the communities we serve. Zurich maintains a comprehensive employee benefits package for employees as well as eligible dependents and competitive compensation. Please click here to learn more. Zurich in North America is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Zurich does not accept unsolicited resumes from search firms or employment agencies. Any unsolicited resume will become the property of Zurich American Insurance. If you are a preferred vendor, please use our Recruiting Agency Portal for resume submission. Location(s): AM - St. Louis Remote Working: Yes Schedule: Full Time Employment Sponsorship Offered: No Linkedin Recruiter Tag: #LI-DNI #NAAIA Nearest Major Market: St Louis
    $181.5k yearly 36d ago
  • Remote Lead Security Officer - YKHC Bethel

    Nana Regional Corporation 4.2company rating

    Remote job

    The Remote Lead Security Officer provides services for a variety of large and small business clients in remote settings where health, safety and security is our #1 priority. This position provides oversight and support for security operations in a remote setting.All duties are to be performed in accordance with NMS' mission, vision, and values. Responsibilities + Assigns personnel to various posts or patrols. Interprets security rules and procedures. + Supervises operation procedures and activities for a client's security services. + Develop and maintain a deep understanding of the business demands and have the ability to document complex business processes while tracking/managing numerous business and staffing needs. + Reviews and submits Daily Activity Reports and Incident Reports to client. Ensures accuracy and completeness of all reports. + Prepares monthly security reports analyzing security trends and activities. Provides security recommendations to client. + Provides post orientation and training for new officers. + In conjunction with local management, prepares annual performance evaluations for officers assigned to the site. + Translate business needs into functional requirements and prepare the appropriate documentation to communicate and validate those needs + Prepares work schedule and reviews Leave requests for approval/denial + Continually communicates with clients to assist them as required with security matters and improve services. + Receives and appropriately resolves irregularity reports. + Administrates a variety of business related paperwork. + Performs a variety of security related investigations. + Review recorded data such as property damage, unusual occurrences, incident reports, etc. to determine appropriate courses of action. + Confers with various agencies to gain their cooperation and coordination. + Coordinate Post orders, updates and revisions. + On-call during off hours. + May assume role of Incident Command, depending on nature of incident + Serves as Transportation Dispatcher and ensures shuttles are dispatched to the appropriate pick-up locations. + Monitors Market / Café Items for loss prevention. + Conducts cash transactions for items purchased in Market and assists customers with self-check-out. + During fall and winter months, monitors and records outside Driving & Walking conditions for client's property. Notifies the client when Driving & Walking surfaces require maintenance. + Provides transportation services using a variety of vehicles ranging from standard passenger vehicles to large passenger buses and off-road vehicles + Provides emergency medical intervention including CPR, AED and patient movement. + May also be combined with other position duties + Notify supervisor if safety and sanitation standards are not being met. + Other duties that are pertinent to the department or unit's success also may be assigned. + This position is responsible for the supervision of staff. Qualifications + High school diploma or GED equivalent. + Must have at least five (5) years of full time professional security, law enforcement or military experience. + Must have at least two (2) years of supervisory experience in a directly related field. + A valid Driver's License and an acceptable driving record for the past three (3) years to be eligible under NMS' vehicle insurance policy. + Must be able to obtain and pay the Alaska Guard License fee of $98.25 prior to beginning work. + Must obtain a State of Alaska Armed Guard License upon hire. + Must have effective training skills and ability to produce specific training for each Security position designated in the contract, and to produce general security training on a quarterly basis. + Must have working knowledge of the Incident Command System (ICS). + Must have basic computer skills to include but not limited to Microsoft office and contract specific software. + Must have basic math skills. + Must pass all pre-employment contract requirements which may include but are not limited to: hair follicle drug test, physical and fit for duty assessment and hearing test. Applicants not located near a testing facility are responsible for paying for travel to the nearest testing facility. + Must be able to live in dormitory style settings and meet cleanliness requirements of the remote camp. + Must be able to cooperate and work as part of a team with fellow employees, customers and clients. + Must be able to make decisions in the moment with little to no supervision. + Must be able to be on your feet for 12 hours per shift for the scheduled rotation. + Contract requires employees to speak, understand, read and write English. + Must meet and adhere to all safety guidelines and regulations set forth by the company and client. _CANDIDATES RESIDING OUTSIDE ANCHORAGE AREA:_ _Candidates residing in the Lower 48 for any contract:_ _For the purposes of pre-employment testing, Anchorage will be considered the point of hire (with the exception of drug testing, which will be conducted near the candidate's place of residence). Employee is responsible for any travel expenses and needed accommodations related to pre−employment tasks that need to be completed in Anchorage, AK. This includes, but is not limited to, any safety training requirements, required pre−employment testing and/or training such as physical, DOT physical/medical card, fit for duty, audiogram, and/or other testing required by contract/company (such as NSTC, APICC training, security licensing requirements, etc._ _Candidates residing in Alaska for Alyeska and Hillcorp contracts:_ _pre-employment testing will be scheduled near the candidate's area of residence within the state. The only exception is when the candidate lives in a region without the necessary service providers to complete all requirements._ _Flights to Remote Locations:_ _All employees are responsible for all expenses related to reporting to point of hire (Anchorage, AK) for scheduled trips paid for by the company for remote locations._ Working Conditions and Physical Requirements Weather: Indoor/Outdoor. Frequently exposed to arctic conditions. Noise level: Moderate to Loud Description of environment: This is a remote hospital environment. Must constantly be able to stand, walk, climb, push, pull use hands and arms, stoop, kneel and crouch. Physical requirements: Fit For Duty Test + Lift:Lift 50 lbs. from floor to knuckle x2 + Lift:Lift 50 lbs. from floor to waist x 2 + Carry:Carry 35 lbs. with two hands for a minimum distance of 150 feet, self-paced + _Allow a 60 second rest break after 75 feet._ + Push:push horizontally with a peak force of 60 f-lbs. with two hands + Pull:pull horizontally with a peak force of 60 f-lbs. with two hands. + Stoop & Twist:Perform alternate cross over toe touches x 10 each side, self-paced but continuous. + Kneel:Kneel on one knee and stand.Return to kneel on opposite knee.Repeat alternate kneeling sequence x 3 for each knee, self-pace but continuous. + Stand from Supine Position Test:From a supine, recumbent position,while wearing arctic gear, test recipient must be able to stand without assistance x 3, self-paced (this task must be accomplished safely without significant loss of balance or falling.) Allow one re-test when there is a loss of balance considered unsafe or a fall. + Walk: Walk on a treadmill at 3 MPH for 10 minutes with good balance, + Stairs:Climb up and down 10 steps x 2 for a total of 20 steps, self-paced. + Shoveling:Perform a shovel test for five (5) minutes self-paced but continuous (i.e., no breaks) using a standard snow shovel with a 3 lb. weight attached to the shovel blade. (e.g. sand bag weight securely taped to the shovel blade.) + Stairs & Carry:Climb up and down 10 steps x 2 for a total of 20 steps while carrying 30 lbs. in one hand and using the other hand to grasp a railing for safety, self-paced. + _Allow a 60 second rest period after climbing up and down 10 steps while carrying._ Competencies + Customer Service - Provides outstanding customer service; manages difficult or emotional situations; responds promptly to customer needs; responds to request for service and assistance; meets commitments in a timely manner. + Interpersonal Skills - Focuses on solving conflict; maintains confidentiality; listens to others without interrupting; keeps emotions under control; remains open to other ideas. + Oral Communication - Speaks clearly and persuasively in positive or negative situations; listens and gets clarification; responds well to questions; demonstrates group presentation skills; participates in meetings. + Written Communication - Writes incident, logs and other reports clearly; able to read and interpret written information. Equal Opportunity Employer NANA Regional Corporation, Inc. and its subsidiaries are equal employment opportunity employers. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender (including pregnancy, gender-identity and sexual orientation), age, disability, genetic information, veteran protected status or any other characteristic protected by applicable law. NANA grants employment preference to shareholder of NANA, their spouses and descendants to the extent allowed by law. Accommodation Requests for Job Seekers with a Disability. If you are a job seeker with a disability and require accessibility assistance or an accommodation for any part of the employment process, contact us at ******************* or **************. Default: Location : Location _US-AK-Bethel_ Job ID _2025-20087_ NMS Division _NMS Security Services AK_ Work Type _Remote Rotational_ Work Location _Bethel_ NMS is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, veteran protected status or any other characteristic protected by applicable law.
    $48k-78k yearly est. 30d ago
  • Security Operations Manager

    ECS Federal 4.3company rating

    Remote job

    ECS is seeking a Security Operations Manager to work remotely. Please Note: This position is contingent upon contract award. ECS is seeking an experienced Security Operations Manager to work remotely providing Cyber Security operations support for NIH NIAID Enabling and Advancing Technologies (NEAT). This engagement provides a spectrum of management, technologies development, applications/software engineering, bioinformatics support, and professional development. Please Note: This position is contingent upon contract win. The Security Operations Manager will be the single POC providing ongoing status and progress to the NIAID CO and COR. In this role, you will be responsible for cyber security incident resolution, monitoring of NIAID systems and components to detect potential threats, and project management and engineering support for the improvement and automation of security operation tools and processes. Requirements/Duties: * Cybersecurity incident resolution including investigation and response to minimize the impact or likelihood of incidents; * Monitoring of NIAID systems and components to detect potential threats; and * Project management and engineering support for the improvement and automation of security operations tools and processes. * Project support for projects to improve and automate security operations capabilities including developing solutions and options for project milestones, developing project plans in a task and completion tracking tool such as Jira, and reporting on progress in real-time using an IT Service Management tool such as ServiceNow. * Respond to and resolve security and privacy incidents and coordinate with the NIH Threat Management and Incident Response (TMIR) team and privacy coordinators according to NIH or Federal format and timelines. * Advise and assist with SOC architecture activities, for all SOC information systems initiatives supporting all SOC tools and capabilities. Salary Range: $150,000 - $190,000 General Description of Benefits * Bachelor's degree in Cybersecurity, Computer Science, or related field. * Active Public Trust or higher security clearance. * Minimum of 10 years of experience in cybersecurity. 15 years' experience in cybersecurity preferred. * 8+ years' experience leading and delivering in security operations programs and incident management for comparably sized federal agencies and security programs. * Shall have at least one of the following industry-recognized certifications: * Certified Information System Security Professional (CISSP) * Global Information Assurance Certification (GIAC) * Certified Enterprise Defender (GCED) * GIAC Certified Incident Handler (GCIH) * Certified Network Defender (CND) * Systems Security Certified Practitioner (SSCP) * Proven ability to consistently understand threats, evaluate the impact of potential incidents, and recommend risk reduction techniques based on a knowledge of different operation threat environments, general attack stages, incident categories, cyber defense tool data collection, and playbooks for resolving common incidents. * Demonstrated expertise in analyzing and providing clear and concise risk reports, dashboards, and other visualizations to federal risk executives, system operators, and system stakeholders. * Knowledge of and experience overseeing the administration and configuration of workstation and infrastructure security tools including but not limited to: Anti-malware/Anti-virus software, Data Loss Prevention software, endpoint detection and response (EDR), vulnerability assessment tools, asset discovery and management software, SIEM, Cloud Access Security Broker (CASB). * Knowledge of and experience supporting enterprise-wide penetration testing remediation to comply with agency remediation standards in a federated model like NIH. * Documented experience in monitoring an enterprise-wide environment including cloud-based systems for potential security incidents and in all steps to resolve incidents to minimize the impact and likelihood to operations. * Experience with establishing and enhancing security operations capabilities and proactively identifying potential risks that may lead to an incident including coordination with multi-contractor teams and across agency groups. * Experience in setting up, administering, and enhancing cybersecurity tools and security operations processes to reduce alerting on false positives, to proactively identify configurations that may lead to a potential incident, and to automate incident resolution playbooks. * Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non-nation state sponsored], and third generation [nation state sponsored]); general attack stages (e.g., footprinting and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.); incident categories, incident responses, and timelines for responses; as well as penetration testing techniques and tools. * Reside within the Washington DC Metro area. * Travel within the Washington DC Metro Area, and CONUS as needed.
    $150k-190k yearly 9d ago
  • Security Lead

    Aretec Open Opportunites

    Remote job

    Aretec seeks a Security Lead for a 100% remote opportunity with a minimum of 10 years of experience leading a security delivery team with experience: collaborating with ISSOs to define and develop cybersecurity test plans utilizing cloud automation capabilities prioritizing and coordinating security remediation activities developing cross-program summary reporting and tracking for key security metrics
    $32k-59k yearly est. 60d+ ago
  • Security Lead (Vulnerability Management) - SF/NYC/Remote (US)

    Cogent Security

    Remote job

    Cogent Security is on a mission to stop breaches and prevent cybercrime by innovating at the frontier of generative AI systems. We are building the world's first AI cyber taskforce, composed of AI agents capable of human-caliber reasoning and execution of cybersecurity tasks, that autonomously protects organizations from emerging threats. The early adopters of our technology include some of the world's most important institutions, spanning public companies, elite universities, and Fortune 500 corporations across industries. Cogent was founded by a seasoned team of former engineering and product leaders, who bring decades of experience across cybersecurity and technology. The team is fully in-person in San Francisco and New York, and consists of the top software engineering and machine learning talent from leading companies such as Abnormal Security, Coinbase, Microsoft, Tesla, Stripe and more. To support our ambitious growth plans, we recently raised a large Seed round led by Greylock Partners and leading angels across AI, cybersecurity, and enterprise software (e.g. Reid Hoffman and founders of Abnormal, Datadog, and other top companies). As we execute on our mission, we are constantly pushing ourselves to ACHIEVe: Ambition for Excellence We work backwards from the way things should be and constantly measure our progress against it Customer Centricity We obsess over the problems our customers face and relentlessly innovate to find the best solutions Intellectual Honesty We embrace hard conversations and actively seek the truth Intentionality We exhibit good judgment and are thoughtful about tradeoffs Extreme Ownership We take pride in our work and never say the words “not my problem” Velocity / Bias for Action We don't leave for tomorrow what can be done today About the Role As Security Lead, you will be both a key architect of our product and a steward of Cogent's own operational security. What You'll Do Shape the Cogent product at the frontier of AI and cybersecurity Work hand-in-hand with machine learning engineers to build AI agents grounded in real-world security workflows Contribute deep domain insight to shape product strategy, roadmap, and core capabilities Build the world's first AI-native cybersecurity Org Extend and evolve Cogent's security posture, systems, and incident response capabilities to create the strongest cyber program in the industry Implement processes and tools to protect Cogent and our customers end to end Educate the market and elevate the industry Write thought-provoking content, partner with customers, and speak credibly about the role of AI in vulnerability management Help define how the industry thinks about autonomous security What You'll Bring You are a top 1% builder who thrives at the intersection of security and engineering. You bring: 10+ years of deep, hands-on experience in security engineering Expertise in vulnerability management across the attack surface Fluency in Python or a comparable language, with a passion for automation A track record of operating at scale in high-stakes, fast-paced environments A bias for clarity, velocity, and technical rigor (Bonus) Experience working closely with ML, AI, or data science teams For California Based Applicants The standard base salary range for this position is $100,000 - $300,000 annually. Compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation, equity, and benefits. We are committed to building an inclusive and diverse company. We do not discriminate based on gender, ethnicity, sexual orientation, religion, civil or family status, age, disability, or race.
    $32k-59k yearly est. Auto-Apply 60d+ ago
  • Security Policy and Compliance Lead

    Etelligent Group

    Remote job

    Over the past 15 years, eTel has delivered essential solutions for the federal government by securing and managing data, providing scalable identity access, modernizing legacy systems, and building high-performance platforms. By integrating new technologies and ensuring reliable operations we help agencies stay prepared for future challenges As a premier technology solutions and services company to the US federal government, eTel possesses longstanding relationships across the federal civilian marketplace. Other customers include the broader Treasury Department, Commerce Department, and State Department. eTel offers integrated CMMI Level 3 processes, tools, and techniques with innovative, cost-efficient, and secure solutions to address complex challenges. eTel also holds ISO 9001:2015, ISO/IEC 27001:2013, and ISO/IEC 20000-1:2018 certifications, and offers dedicated subject matter experts (SMEs) and thought leaders that possess a deep understanding of customers' environments and challenges. Security Clearance: Secret clearance (Mandatory). Candidates without active secret clearance will not be considered. Citizenship: US Citizen (MUST) Key Responsibilities: Lead SBA's Risk Management Framework (RMF) program to support FISMA requirements, including documentation, assessments, continuous monitoring, audit support, and reporting Develop, review, and maintain security documentation such as SSPs, SARs, POA&Ms, CPs, and continuous monitoring artifacts. Perform and oversee annual system security assessments, functional and tabletop exercises, and ISCM processes. Provide subject matter expertise on NIST SP 800-53A security controls implementation, ensuring compliance with Federal standards. Conduct risk assessments and apply risk management techniques to ensure system design mitigates IA risk. Support SBA audit readiness, agency reporting, and coordination with system owners, ISSOs, and stakeholders. Mentor junior compliance staff and ensure timely, high-quality delivery of compliance artifacts. Required Qualifications: Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related field. Advanced degree preferred but not required. CISSP (Certified Information Systems Security Professional) or equivalent (required). Minimum 5+ years developing A&A packages (SSPs, SARs, POA&Ms, CPs). At least 5 years implementing NIST 800-53A controls for Federal agencies. Recent hands-on experience (within last 3 years) performing continuous monitoring. Strong experience conducting risk assessments and ensuring security compliance. Location: Work will be primarily onsite at SBA locations in Washington, DC, or other designated sites. Remote work requires prior client approval. Local and occasional out-of-area travel may be required. Commitment to Diversity - eTelligent Group provides equal employment opportunities (EEO) to all applicants without regard to race, color, religion, gender, sexual orientation, gender identity, nations origin, age, disability, genetic information, marital status, amnesty, status as a covered veteran, and any other characteristic provided in accordance with applicable, federal, state and local laws.
    $37k-53k yearly est. Auto-Apply 60d+ ago
  • Workday Security Lead

    Gulf Coast Automation Group 3.9company rating

    Remote job

    Job Description Job Title: Workday Security Lead Job Type: Direct Hire About the Role: TalentFish is partnered with a dynamic organization seeking a Workday Security Lead for a direct-hire opportunity. This is a remote position, offering the flexibility to work from anywhere within the U.S. As the Workday Security Lead, you will be responsible for the design, implementation, and ongoing management of Workday security configurations. You'll collaborate closely with HR, IT, and business stakeholders to ensure secure and compliant Workday operations, aligning with best practices and organizational policies. Responsibilities: Lead Workday security strategy and execution across all modules. Design, configure, and maintain Workday security roles and domains. Partner with stakeholders to assess access needs and implement appropriate controls. Monitor and audit user access to ensure compliance with internal and external standards. Provide security support during Workday updates and new module rollouts. Develop and maintain security documentation and training materials. Serve as the Workday security subject matter expert (SME) across the organization. Required Skills & Experience: 5+ years of Workday experience with a focus on security administration. Strong understanding of Workday security architecture, including roles, domains, and business processes. Hands-on experience configuring and maintaining Workday security settings. Experience with audits, SOX compliance, and data privacy standards. Excellent communication and stakeholder management skills. Ability to work independently in a remote environment. Preferred Qualifications: Workday certification(s) in Security or related modules. Experience in a large enterprise or global environment. Familiarity with Workday HCM, Finance, or Payroll modules. Why TalentFish? At TalentFish, we focus on matching talent with opportunity. Our team is committed to helping professionals like you find rewarding roles that align with your expertise and career goals. Let us help you land your next great opportunity! Salary expectations $130,000 -$180,000/year
    $37k-53k yearly est. 23d ago
  • Safety and Security Certification Manager

    Parsons 4.6company rating

    Remote job

    In a world of possibilities, pursue one with endless opportunities. Imagine Next!At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what's possible. Job Description: Parsons is looking for an amazingly talented Safety and Security Certification Manager to join our team! In this role you will get to work on Technical or Engineering projects across the US. Are you great with people and have willingness to work hard to get the job done? Parsons is seeking a candidate with a desire to enhance the fabric of our community. Provides expertise and technical assistance to site management for the implementation of the client's System Safety Program Plan (SSPP) Receives assignments in terms of broad objectives from the Safety Assurance Director in conjunction with the Project Management team. Reviews, interprets and provides assistance in the development of safety & security requirements and adherence to safety & security related regulations and standards. Monitors project safety performance and conducts project audits and safety inspections. Responsibilities: Participates in the development and implementation of design office and project safety plans. Assigns and provides technical supervision of safety performance, qualifications and programs. Reviews contractors on bid list with regard to safety performance, qualifications and programs. Conducts safety audits through review and analysis of performance of safety records and safety inspections of various offices and projects in compliance with ESHARP Management. Participates with labor relations representatives in pre-job conferences to present the company safety policy and explain implementation on the project. Assists the Workers' Compensation Analyst in coordinating medical care and case management of employees injured at company facilities. Reviews loss control reports from company insurance carriers and regulatory inspection agencies and confers with appropriate management representatives on compliance with regulations and citations. Represents the company at national safety conferences. Performs other responsibilities associated with this position as may be appropriate. Provides expertise and technical assistance to project teams for the implementation of company and customer safety policies by establishing and managing a systems safety program that meets or exceeds all current standards for a transit program. Ensures project compliance with applicable regulatory codes to include 49 CFR 659 (Rail Fixed Guideway Systems; State Safety Oversight) and later 49 CFR 670/673 (Public Transit Safety Management Program) and 49 CFR 270 (Commuter Rail - System Safety Program). Ensures that FTA and FRA funded transit projects comply with federally mandated safety and security standards that require transit properties to identify hazards, vulnerabilities and to ensure that the identified hazards and vulnerabilities are evaluated, properly controlled or mitigated. Develops and implements Safety and Security Certification programs for transportation projects in accordance with the FTA and FRA guides The FTA Handbook for Safety & Security Certification and FTA Circular 5800.1. Manages hazards in conformance with MIL-STD-882 and tracks hazards and vulnerabilities to closure. Performs Threat and Vulnerability Assessments (TVA's) in accordance with APTA Standards (APTA-SS-SIS-S-017-21), the Security Risk assessment Methodology for Public Transit. Develops and documents processes for System Safety and Security Certification Programs. Provides training for staff needing knowledge of the System Safety Certification process. Performs System Safety and Security Hazard Analysis and Security Vulnerability Analysis in the design, construction and testing phases of projects. Reviews risk mitigation strategies and manages residual risks following mitigation activities. Develops Certifiable Items Lists based on design criteria and specifications. Reviews design drawings for safety compliance. Verifies and validates hazard and vulnerability mitigation requirements for compliance with system safety design criteria and specifications. Conducts field inspections to validate that design is implemented in construction. Certifies system integration requirements. Qualifications: Bachelor's Degree in Occupational Safety and Health or related field (or equivalent experience) and typically 10+ years of related work experience in the field of Health and Safety, including some supervisory experience. Professional certification preferred. Requires extensive knowledge of Federal and state health and safety regulations and reporting procedures, as well as strong written and oral communication skills. Ability to perform in a supervisory/managerial capacity is also required. Security Clearance Requirement: NoneThis position is part of our Critical Infrastructure team.For more than 80 years, our experts have designed and delivered the critical infrastructure that connects and protects communities around the world. We work in collaborative teams, both within the company and with our partners and customers, to plan, design, build, and modernize infrastructure. We take special pride in projects and solutions that improve communities as well as people's quality of life by promoting economic growth, enhancing mobility, and increasing sustainability and resiliency. Powered by our people, we provide the imagination necessary to support our customers' visions-and to help them see what's next!Salary Range: $108,700.00 - $190,200.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, Employee Stock Ownership Plan (ESOP), 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled.Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee's wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest-APPLY TODAY! Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to ************************************************
    $108.7k-190.2k yearly Auto-Apply 24d ago
  • Manager, Security Operations (SecOps) - REMOTE

    Assistrx 4.2company rating

    Remote job

    AssistRx is seeking a seasoned and visionary Manager of Security Operations to lead our SecOps team in safeguarding the organization's digital infrastructure. This role demands a strategic thinker with deep cybersecurity expertise, a collaborative mindset, and the ability to communicate effectively across technical, business, and client-facing domains. The ideal candidate will drive operational excellence, risk mitigation, and innovation in security practices while aligning with broader business goals. Requirements · Leadership & Strategy · Develop and execute the SecOps roadmap in alignment with enterprise security and business objectives. · Lead and mentor a team of security analysts and engineers, fostering a culture of accountability and continuous improvement. · Collaborate with the CISO and executive leadership to define security priorities and communicate risk posture. · Security Operations Management · Oversee daily operations of the SecOps team, including incident detection, response, and resolution. · Manage SIEM, IDS/IPS, and other monitoring tools to ensure proactive threat identification. · Coordinate vulnerability assessments, penetration testing, and remediation efforts. · Governance & Compliance · Ensure compliance with regulatory frameworks (HIPAA, SOC 2, etc.) and internal policies. · Lead internal and external audits, including annual pen-tests and vendor risk assessments. · Communication & Collaboration · Serve as a liaison between technical teams, business units, and external clients, translating complex security issues into actionable insights. · Facilitate constructive conversations with other departments and clients to drive cross-functional change and alignment. · Present security metrics, incident reports, and strategic updates to senior stakeholders and client representatives. · Innovation, Metrics & Optimization · Design, build, and implement scalable security operations processes and infrastructure. · Define and manage key performance indicators (KPIs) and metrics to measure the effectiveness of SecOps initiatives. · Evaluate and implement emerging security technologies and automation tools. · Drive continuous improvement in incident response workflows and threat intelligence integration. · Monitor and respond to emerging and evolving trends in cybersecurity, ensuring the organization remains resilient and forward-looking. Preferred Certifications • CISSP, CISM, or equivalent • Microsoft Certified: Azure Security Engineer Associate • GIAC Security Operations Certified (GSOC) • Project Management Professional (PMP) or Certified ScrumMaster (CSM) • Bachelor's or Master's degree in Cybersecurity, Information Technology, or related field. • 12+ years of experience in cybersecurity, with at least 5 years in a leadership role. • Proven experience leading a Security Operations (SecOps) team, including hiring, mentoring, and performance management. • Strong project management skills to plan and execute changes within the SecOps team and across departments. • Demonstrated ability to engage in constructive, cross-functional conversations and communicate effectively with clients. • Experience designing and implementing operational processes and managing to defined metrics. • Expertise in Microsoft Azure, Microsoft 365, and cloud security architecture. • Strong understanding of risk management, threat modeling, and regulatory compliance. • Exceptional verbal and written communication skills. • Strategic mindset with the ability to balance technical depth and business impact. • Commitment to staying current with cybersecurity trends, threats, and best practices. Benefits Supportive, progressive, fast-paced environment Competitive pay structure Matching 401(k) with immediate vesting Medical, dental, vision, life, & short-term disability insurance AssistRx, Inc. is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to race, religion, color, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors, or any other protected categories protected by federal, state, or local laws. All offers of employment with AssistRx are conditional based on the successful completion of a pre-employment background check. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. Sponsorship and/or work authorization is not available for this position. AssistRx does not accept unsolicited resumes from search firms or any other vendor services. Any unsolicited resumes will be considered property of AssistRx and no fee will be paid in the event of a hire
    $64k-96k yearly est. Auto-Apply 60d+ ago
  • Technical Security Operations Center (SOC) Manager (R-00102)

    True Zero Technologies

    Remote job

    True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that said outcomes begin and end with our people, and that is what we have built, a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top tier services to our customers. In 2023, True Zero was recognized as a “Best Places to Work” in two categories ("Prosperous and Thriving" ($5MM - $50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV)) and in 2022, was recognized as one of Inc. Magazine's Top 5000 Fastest Growing Companies. Job Summary: TZT is seeking a highly skilled and experienced Security Operations Center (SOC) Program Manager to join our team. As a SOC Program Manager, you will be responsible for overseeing the successful implementation and management of Security Operations Centers (SOCs) and Information Technologies (IT) projects. This is a critical role that requires a strong understanding of SOC operations, information security principles, and Splunk architectures (or alternate Splunk experience). As a TZT consultant, the candidate will receive access to the full knowledge base which is driven by the True Zero community as well as the technical backing of the entire PS team. True Zero encourages collaboration and growth through information sharing and knowledge workshops. The candidate will also have access to our internal Slack channel to stay connected with the team as well as the necessary tools to train, demo, test and grow their professional skills.SOC Manager Responsibilities Manage end-to-end program delivery for Security Operations Centers and Information Technologies projects. Define, manage, and monitor project scope, goals, deliverables, and projct status in collaboration with stakeholders Develop and maintain project plans, schedules, and budgets. Coordinate and collaborate with cross-functional teams to ensure project objectives and deliverables are met. Provide guidance and mentorship to project teams to drive successful project execution. Monitor project progress, identify risks and issues, and implement mitigation strategies. Facilitate effective communication between project stakeholders, including technical and non-technical audiences. Ensure adherence to project management best practices and industry standards. Conduct regular project status meetings and provideaccurate reporting to senior management. Manage SOC resources, establish SOC staffing/shift plans, identify/manage analyst tasks, provide status reporting and escalation to senior leadership SOC PM Requirements Bachelor's degree in Computer Science, Information Systems, or a related field (or equivalent experience). Proven experience (5+ years) in program management for Security Operations Centers and Information Technologies projects. Strong knowledge and understanding of SOC operations, information security principles, and best practices. Proficiency in Splunk architecture or alternate Splunk experience. Excellent project management skills, including the ability to prioritize tasks, manage resources, and meet deadlines. Solid understanding of project management methodologies and frameworks. Exceptional communication and interpersonal skills, with the ability to effectively engage with stakeholders at all levels. Strong analytical and problem-solving abilities. Project/program management and/or technical certifications, such as PMP, CISSP, or CISM are highly desirable. Proven experience in leading and managing complex cybersecurity projects. Familiarity with other security technologies and tools, such as SIEM, IDS/IPS, and vulnerability management. Experience in managing and mentoring project teams, ensuring high performance and accountability. Knowledge of regulatory compliance frameworks, such as GDPR, HIPAA, or PCI DSS. Ability to adapt to changing priorities and thrive in a fast-paced, dynamic environment. Strong leadership skills and the ability to influence and motivate team members. Attention to detail and a commitment to delivering high-quality results. U.S. Citizenship is required as this is in support of a Federal Customer. We're actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy: - Competitive salary, paid twice per month- Best in class medical coverage- 100% of medical premiums covered by True Zero- Company wide new business incentive programs- Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)- 3 weeks of PTO starting + 11 Paid Holidays Annually- 401k Program with 100% company match on the first 4%- Monthly reimbursement of Cell Phone and Home Internet costs- Paternity/Maternity Leave- Investment in training and certifications to broaden and deepen your technical skills
    $43k-81k yearly est. Auto-Apply 60d+ ago
  • Senior Security Officer - Michael C. Carlos Museum

    Emory Healthcare/Emory University 4.3company rating

    Remote job

    **Discover Your Career at Emory University** Emory University is a leading research university that fosters excellence and attracts world-class talent to innovate today and prepare leaders for the future. We welcome candidates who can contribute to the excellence of our academic community. **Description** KEY RESPONSIBILITIES: + Ensures a safe and secure environment for staff, students, patients and visitors. + Maintains open channels of communication to ensure regulations are understood and properly enforced. + Contacts medical personnel in emergency situations and provides first aid or CPR for stabilization until appropriate staff arrives. + Monitors the quality of security services and recommends changes to improve or enhance them. + Supervises security personnel and serves as a resource for customers. Performs related responsibilities as required. MINIMUM QUALIFICATIONS: + A high school diploma or equivalent. + Two years of military or security experience. + Ability to exercise physical restraint. + Positions in this classifications may require a valid Georgia driver's license and insurable driving record NOTE: Position tasks are required to be performed in-person at an Emory University location; working remote is not an option. Emory reserves the right to change this status with notice to employee. **Additional Details** Emory is an equal opportunity employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by state or federal law. Emory University does not discriminate in admissions, educational programs, or employment, including recruitment, hiring, promotions, transfers, discipline, terminations, wage and salary administration, benefits, and training. Students, faculty, and staff are assured of participation in university programs and in the use of facilities without such discrimination. Emory University complies with Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veteran's Readjustment Assistance Act, and applicable executive orders, federal and state regulations regarding nondiscrimination, equal opportunity, and affirmative action (for protected veterans and individuals with disabilities). Inquiries regarding this policy should be directed to the Emory University Department of Equity and Civil Rights Compliance, 201 Dowman Drive, Administration Building, Atlanta, GA 30322. Telephone: ************ (V) | ************ (TDD). Emory University is committed to ensuring equal access and providing reasonable accommodations to qualified individuals with disabilities upon request. To request this document in an alternate format or to seek a reasonable accommodation, please contact the Department of Accessibility Services at accessibility@emory.edu or call ************ (Voice) | ************ (TDD). We kindly ask that requests be made at least seven business days in advance to allow adequate time for coordination. **Connect With Us!** Connect with us for general consideration! **Job Number** _156715_ **Job Type** _Regular Full-Time_ **Division** _Emory University Libraries_ **Department** _Museum Security_ **Job Category** _Public Safety and Security_ **Campus Location (For Posting) : Location** _US-GA-Atlanta_ **_Location : Name_** _Emory Campus-Clifton Corridor_ **Remote Work Classification** _No Remote_ **Health and Safety Information** _Not Applicable_
    $25k-34k yearly est. 23d ago
  • M365 Security Specialist

    Terrestris Global Solutions

    Remote job

    Are you looking for a Challenge? Looking for an innovative organization and the opportunity to learn and grow professionally? We can help! We are seeking a Security Specialist to support the Internal Revenue Service (IRS), Information Technology (IT), Enterprise Operations, IRS Web Infrastructure Services, and M365 Program Management Branch. This is a remote position. I've never heard of Terrestris. What do you do? At Terrestris, we leverage technology to create better mission outcomes through better human performance. We form strong client and team relationships through transparency and strive to create an environment where our team can let their excellence shine through. By finding, developing, and incorporating new ideas, we provide memorable services. Rooted in the USMC values of honor, courage, and commitment, Terrestris seeks to deliver extraordinary value to the American people by helping the Government become more efficient and effective. So, what will the Security Specialist at Terrestris do? In support of the IRS M365 Cloud Program Management Office, we are seeking an experienced Security Specialist to maintain and enhance the security posture of the IRS Microsoft 365 (M365) environment. This role will focus on security onboarding, audit logging solutions, data protection, AOS security models, compliance, and enterprise governance. The ideal candidate will have deep expertise in Microsoft 365 security capabilities, hands-on experience supporting high-security government or large enterprise environments, and strong knowledge of federal compliance and risk management frameworks. What does a typical day look like for the Security Specialist? You will: Configure and secure AvePoint Online Services interfaces with a focus on security controls. Apply data connectors and establish enterprise-wide data policies. Conduct security and privacy analysis of Microsoft 365 services to ensure compliance with IRS and federal standards. Implement, configure, and monitor M365 security controls, compliance settings, and governance policies. Support ongoing risk assessments, vulnerability management, and remediation activities. Develop, maintain, and update security documentation, including policies, procedures, and incident response plans. Collaborate with technical teams, engineers, and IRS SMEs to ensure secure architecture, integration, and operation of M365 tools. Monitor security alerts, assess potential threats, and support incident response activities. Adapt quickly to IRS-specific compliance requirements, security controls, and operational processes. What qualifications do you look for? You might be the professional we're looking for if you have: Authorized to work in the United States permanently without sponsorship. Minimum of 5 years of IT security experience, preferably supporting Microsoft 365 environments in large government or enterprise settings. Experience supporting federal government clients or other high-security, compliance-driven environments; IRS experience preferred. Demonstrated experience managing user permissions, data retention, compliance settings, and governance policies within M365. Hands-on knowledge of Microsoft 365 security features, Azure AD, Intune, Exchange Online security, identity protection tools, and Copilot for Power Apps/Power Automate, including AI Builder. Demonstrated ability to troubleshoot and resolve technical issues across the entire M365 cloud platform and AvePoint Online Services. Familiarity with federal cybersecurity standards and frameworks such as NIST 800-53, FISMA, and Zero Trust. Strong analytical, problem-solving, and risk mitigation skills. Excellent verbal and written communication skills with the ability to explain technical concepts to multiple audiences. Proven ability to establish and maintain effective business unit relationships and coordinate security activities across teams. We are extra impressed by folks with: Experience supporting IRS programs or IRS modernization initiatives. Hands-on experience with incident response, threat analysis, and security automation within Microsoft 365 and Azure environments. Strong knowledge of cloud governance, compliance tooling, and security frameworks across M365 and Azure. Relevant certifications, including but not limited to: CISSP, CISM, Security+ Microsoft Certified: Security Operations Analyst Microsoft 365 Certified: Security Administrator SC-400: Information Protection and Compliance SC-300: Identity and Access Administrator MS-102: Microsoft 365 Administrator Associate PL-400: Power Platform Developer Associate PL-600: Power Platform Solution Architect Expert PL-900: Power Platform Fundamentals AZ-104: Microsoft Azure Administrator Associate ITIL 4 Foundation AvePoint Administration What kind of benefits does Terrestris Offer? We offer outstanding benefits including health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work-life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category. Terrestris is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to age, race, color, religion, sex, national origin, sexual orientation, disability, or veteran status. Applicants must be authorized to work in the U.S. DILBERT © 2018 Scott Adams. Used By permission of ANDREWS MCMEEL SYNDICATION. All rights reserved.
    $64k-133k yearly est. 9d ago
  • Intel Security Specialist with TS and SCI Eligible

    Watershed Security

    Remote job

    Watershed Security, is a Veteran Owned Small Business with over 20 years' Cybersecurity and Government Contracting experiencing. Watershed is looking for a Intel Security Specialist to support the Naval Surface Warfare Center (NSWC) Dahlgren Division Dam Neck Anex (NSWCDD-DNA) in Dam Neck, VA. The successful candidates will have experience coordinating and enacting required security changes, with in various levels of an organization, ensuring compliance with published policies; conducting cybersecurity vulnerability and threat analysis; and be experienced as an ISSO or ISSE. REQUIRED QUALIFICATIONS Bachelor of Science in Information Systems or Bachelor of Science in Information Technology or Bachelor of Science in Computer Science or Bachelor of Science in Computer Engineering. Years of Experience: Ten (10) years of full-time professional experience in performing Risk Management Framework (RMF) activities; (or) 15 years of RMF experience and a GED/High School Diploma. Must be able to maintain IAT-II designation with at least one of the following active certifications: CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP. Any level of Demonstrated experience in all of the following areas: Performing STIG assessments to include using SCAP benchmarks and EvaluateSTIG Performing vulnerability assessments with the Assured Compliance Assessment Solution tool Using eMASS or XACTA for RMF package management Developing Plans of Actions and Milestones (POA&M) entries Completing Risk Management Framework Step 5 authorizations in the ISSE capacity or Information System Security Officer (ISSO) capacity Communicating risk reduction recommendations to stakeholders Managing privileged user documentation, training, and CSWF requirements Researching and evaluating Cyber Task Orders (CTOs) and detailing implementation requirements Tracking documentation requirements and coordination with POCs for updates Reviewing Interconnection Security Agreements (ISAs) for technical details and ensuring within ATO parameters Maintaining inventory, tracking, and destruction of removable media Clearance Level: TOP SECRET with SCI Eligibility; US Citizen. Ability to possibly provide onsite support in Dam Neck VA. Some/all remote work may be an option, however the norm will be onsite support. This will be dependent upon customer needs and classification level of work being performed. Some travel may be required. Proficient with Microsoft Office Suite (Word, Excel, Teams, Project). Self-Starter; detail oriented; able to brief senior level staff. DESIRED QUALIFICATIONS Experience supporting 10 or more Navy Packages (achieving and/or maintaining ATO) Experience with Navy Cybersecurity requirements Experience with the NAVSEA RMF Business Rules Contingent upon award PAY RANGE Final salary is influenced by factors such as location, contract labor categories, experience, skills, education, and certifications. Watershed offers competitive compensation, medical and dental benefits, educational reimbursement, 401K plans with matching, 15 days of PTO to start and 11 paid holidays per year. The proposed salary range for this position is: $100,000.00 - $115,000.00 USD. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
    $100k-115k yearly Auto-Apply 60d+ ago
  • Security Specialist III

    JT3 4.3company rating

    Remote job

    JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force, Space Force, and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. JT4 develops and maintains realistic, integrated test and training environments and prepares our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges. RANGE POSITION DESCRIPTION - ESSENTIAL FUNCTIONS/DUTIES This position includes support in ongoing development and implementation of general and program specific security processes and procedures to include the advisement, planning, implementation, oversight, monitoring, analysis, reporting and assistance in the execution of security operations for a Special Access Programs (SAPs) and associated Facilities (SAPFs). Candidates with certification under the Security Personnel Education and Development program are highly preferred. Candidates with knowledge and experience with JADE are highly preferred. An Active TOP SECRET clearance is required for this position. Primary hours can change as dictated by mission requirements. Performs the daily administrative tasks in support of the site security department. Communicates with the clearance granting agency regarding status of clearances and periodic re-investigations for employees/consultants. Obtains certification of existing clearance levels for employees/consultants and for prospective employees from appropriate customer/agency sponsor. Issues security badges to designated employees and visitors. Maintain logs and records of badges issued and related information. Schedules initial, periodic and exit briefings and notifies supervisors and employees of schedule. Coordinates with employees/consultants for timely submittal of documents for initial clearances and periodic reinvestigations; fingerprint employees/consultants as required. Assists in facilitating security briefings for individuals/groups as required. Performs other related tasks as directed. REQUIREMENTS - EDUCATION, TECHNICAL, AND WORK EXPERIENCE Associate's Degree or equivalent military or technical school and 5 years specifically related work experience in the NISPOM/SAP/SCI security fields, complemented by formal training such as successful completion of the Industrial Security Management Course. Must be knowledgeable with the rules and regulations of the National Industrial Security Program Operation Manual (NISPOM) pertaining to all aspects of security. Must have excellent communication skills, both written and oral. Must be proficient operating personal computers using Microsoft Word, Excel, and graphics software, and possess database management experience. Familiar with a mainframe computer terminal, laminating machine and professional instamatic camera. Must possess a current, State issued driver's license. Must have a current government security clearance and special access. Must be a U.S. citizen. SALARY The expected pay range for this position is $84,000 to $92,000 annually. Note: The salary range offered for this position is a good faith description of the expected salary range this role will pay. JT4, LLC considers factors such as (but not limited to) responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and business considerations when extending an offer. BENEFITS Medical, Dental, Vision Insurance **Benefits Active on Day 1 Life Insurance Health Savings Accounts/FSA's Disability Insurance Paid Time Off 401(k) Plan Options with Employer Match JT4 will match 50%, up to an 8% contribution 100% Immediate Vesting Tuition Reimbursement OTHER RESPONSIBILITIES Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job. WORKING CONDITIONS This position involves work typical of an office environment with no unusual hazards. There is occasional lifting (up to 20 pounds), constant sitting and use of a computer terminal, constant use of sight abilities while writing, reviewing, and editing documents, constant use of speech/hearing abilities for routine communications. Must maintain constant mental alertness. Routine travel to remote work locations may be required. DISCLAIMER The above statements are intended to describe the general nature and level of work being performed by personnel assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of persons so classified. Tasking is in support of a Federal Government Contract that requires U.S. citizenship. Some jobs may require a candidate to be eligible for a government security clearance, state-issued driver's license or other licenses/certifications, and the inability to obtain and maintain the required clearance, license or certification may affect an employee's ability to maintain employment. SCC: JSOP8, JCIS11, A1412TW
    $84k-92k yearly 1d ago
  • Security Specialist III

    A1412TW

    Remote job

    JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force, Space Force, and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. JT4 develops and maintains realistic, integrated test and training environments and prepares our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges. JOB SUMMARY -- ESSENTIAL FUNCTIONS/DUTIES Provide administrative and personnel security support to the unit manager and security staff. Employee will be responsible to perform the following functions/duties: Performs the daily administrative tasks in support of the site security department Communicates with the clearance granting agency regarding status of clearances and periodic re-investigations for employees/consultants Obtains certification of existing clearance levels for employees/consultants and for prospective employees from appropriate customer/agency sponsor Issues security badges to designated employees and visitors Maintain logs and records of badges issued and related information Schedules initial, periodic and exit briefings and notifies supervisor and employee of schedule Oversees departmental coordination with employees/consultants for timely submittal of documents for initial clearances and periodic reinvestigations; fingerprint employees/consultants as required Facilitates security briefings for individuals/groups as required Provides work direction to lower level department clerical/administrative personnel Performs other related tasks as directed REQUIREMENTS -- EDUCATION, TECHNICAL AND WORK EXPERIENCE Associate's degree or equivalent military or technical school and five years specifically related work experience in the NISPOM/SAP/SCI security fields, complemented by formal training such as successful completion of the Industrial Security Management Course. Must be very knowledgeable with the rules and regulations of the National Industrial Security Program Operation Manual (NISPOM) pertaining to all aspects of security. In addition, a Security Specialist III must possess the following qualifications: Must have excellent communication skills, both written and oral Must be proficient operating personal computers using Microsoft Word, Excel, and graphics software, and possess data base management experience Must be familiar with a standard intel computer system, laminating machine and professional instamatic camera Must qualify for and maintain a government security clearance Must possess a valid, state-issued driver's license SALARY The expected salary range for this position is $53,976.00 to $81,244.80 annually. Note: The salary range offered for this position is a good faith description of the expected salary range this role will pay. JT4, LLC considers factors such as (but not limited to) responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and business considerations when extending an offer. BENEFITS Medical, Dental, Vision Insurance Benefits Active on Day 1 Life Insurance Health Savings Accounts/FSA's Disability Insurance Paid Time Off 401(k) Plan Options with Employer Match JT4 will match 50%, up to an 8% contribution 100% Immediate Vesting Tuition Reimbursement OTHER RESPONSIBILITIES Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job. WORKING CONDITIONS This position involves work typical of an office environment with no unusual hazards. There is occasional lifting (up to 20 pounds), constant sitting and use of a computer terminal, constant use of sight abilities while writing, reviewing, and editing documents, constant use of speech/hearing abilities for routine communications. Must maintain constant mental alertness. Routine travel to remote work locations may be required. DISCLAIMER The above statements are intended to describe the general nature and level of work being performed by personnel assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of persons so classified. Tasking is in support of a federal government contract that requires U.S. citizenship. Some jobs may require a candidate to be eligible for a government security clearance, state-issued driver's license or other licenses / certifications and the inability to obtain and maintain the required clearance, license or certification may affect an employee's ability to maintain employment. SCC: JSOP8; JCIS11 #LI-JD1
    $54k-81.2k yearly 1d ago
  • Security Specialist III

    JSOP8

    Remote job

    JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force, Space Force, and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. JT4 develops and maintains realistic, integrated test and training environments and prepares our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges. JOB SUMMARY -- ESSENTIAL FUNCTIONS/DUTIES Provide administrative and personnel security support to the unit manager and security staff. Employee will be responsible to perform the following functions/duties: Performs the daily administrative tasks in support of the site security department Communicates with the clearance granting agency regarding status of clearances and periodic re-investigations for employees/consultants Obtains certification of existing clearance levels for employees/consultants and for prospective employees from appropriate customer/agency sponsor Issues security badges to designated employees and visitors Maintain logs and records of badges issued and related information Schedules initial, periodic and exit briefings and notifies supervisor and employee of schedule Oversees departmental coordination with employees/consultants for timely submittal of documents for initial clearances and periodic reinvestigations; fingerprint employees/consultants as required Facilitates security briefings for individuals/groups as required Provides work direction to lower level department clerical/administrative personnel Performs other related tasks as directed REQUIREMENTS -- EDUCATION, TECHNICAL AND WORK EXPERIENCE Associate's degree or equivalent military or technical school and five years specifically related work experience in the NISPOM/SAP/SCI security fields, complemented by formal training such as successful completion of the Industrial Security Management Course. Must be very knowledgeable with the rules and regulations of the National Industrial Security Program Operation Manual (NISPOM) pertaining to all aspects of security. In addition, a Security Specialist III must possess the following qualifications: Must have excellent communication skills, both written and oral Must be proficient operating personal computers using Microsoft Word, Excel, and graphics software, and possess data base management experience Must be familiar with a standard intel computer system, laminating machine and professional instamatic camera Must qualify for and maintain a government security clearance Must possess a valid, state-issued driver's license SALARY The expected salary range for this position is $53,976.00 to $81,244.80 annually. Note: The salary range offered for this position is a good faith description of the expected salary range this role will pay. JT4, LLC considers factors such as (but not limited to) responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and business considerations when extending an offer. BENEFITS Medical, Dental, Vision Insurance Benefits Active on Day 1 Life Insurance Health Savings Accounts/FSA's Disability Insurance Paid Time Off 401(k) Plan Options with Employer Match JT4 will match 50%, up to an 8% contribution 100% Immediate Vesting Tuition Reimbursement OTHER RESPONSIBILITIES Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job. WORKING CONDITIONS This position involves work typical of an office environment with no unusual hazards. There is occasional lifting (up to 20 pounds), constant sitting and use of a computer terminal, constant use of sight abilities while writing, reviewing, and editing documents, constant use of speech/hearing abilities for routine communications. Must maintain constant mental alertness. Routine travel to remote work locations may be required. DISCLAIMER The above statements are intended to describe the general nature and level of work being performed by personnel assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of persons so classified. Tasking is in support of a federal government contract that requires U.S. citizenship. Some jobs may require a candidate to be eligible for a government security clearance, state-issued driver's license or other licenses / certifications and the inability to obtain and maintain the required clearance, license or certification may affect an employee's ability to maintain employment. SCC: JSOP8; JCIS11 #LI-JD1
    $54k-81.2k yearly 1d ago
  • Security Specialist (Remote)

    Jobgether

    Remote job

    This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Security Specialist in Washington (USA). We are seeking a skilled Security Specialist to support the management and enhancement of Microsoft 365 (M365) security in a high-security, compliance-driven environment. In this role, you will focus on security configuration, governance, compliance, and risk management, ensuring robust protection for critical enterprise systems. You will work closely with technical teams and stakeholders to implement, monitor, and maintain security controls across M365 platforms, while adapting to federal compliance standards. The ideal candidate combines deep technical expertise in Microsoft 365, Azure, and enterprise security with strong problem-solving and communication skills. This is a fully remote opportunity that offers the chance to contribute to impactful IT security initiatives while collaborating across multiple teams and projects. Accountabilities Configure and secure Microsoft 365 and AvePoint Online Services, applying enterprise-wide security controls and data policies. Implement, monitor, and maintain M365 security features, compliance settings, and governance policies. Conduct security and privacy assessments to ensure adherence to federal standards, including IRS-specific requirements. Support ongoing risk assessments, vulnerability management, incident response, and remediation efforts. Develop, maintain, and update security documentation, policies, and procedures. Collaborate with technical teams, engineers, and subject matter experts to ensure secure architecture and integration of M365 tools. Monitor security alerts, analyze potential threats, and support mitigation and response actions. Adapt quickly to evolving compliance requirements and operational processes. Requirements Must be authorized to work in the United States permanently without sponsorship. Minimum 5 years of IT security experience, ideally supporting Microsoft 365 in large enterprise or government environments. Hands-on experience managing user permissions, data retention, compliance settings, and governance policies within M365. Proficiency with Microsoft 365 security features, Azure AD, Intune, Exchange Online security, identity protection tools, and AI-enabled tools such as Copilot for Power Apps/Power Automate. Strong knowledge of federal cybersecurity standards and frameworks, including NIST 800-53, FISMA, and Zero Trust. Experience supporting high-security, compliance-focused clients; IRS or federal government experience preferred. Excellent analytical, problem-solving, and risk mitigation skills. Strong verbal and written communication skills, able to explain technical concepts to multiple audiences. Relevant certifications are a plus, including CISSP, CISM, Security+, Microsoft Security Operations Analyst, M365 Security Administrator, and Azure certifications. Benefits Comprehensive health, life, and disability insurance coverage. Retirement benefits and financial planning assistance. Paid leave and flexible work arrangements. Professional development, tuition assistance, and career growth opportunities. Recognition programs for outstanding performance. Remote work environment with collaboration across cross-functional teams. Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching. When you apply, your profile goes through our AI-powered screening process designed to identify top talent efficiently and fairly. 🔍 Our AI evaluates your CV and LinkedIn profile thoroughly, analyzing your skills, experience, and achievements. 📊 It compares your profile to the job's core requirements and past success factors to determine your match score. 🎯 Based on this analysis, we automatically shortlist the 3 candidates with the highest match to the role. 🧠 When necessary, our human team may perform an additional manual review to ensure no strong profile is missed. The process is transparent, skills-based, and free of bias - focusing solely on your fit for the role. Once the shortlist is completed, we share it directly with the company that owns the job opening. The final decision and next steps (such as interviews or additional assessments) are then made by their internal hiring team. Thank you for your interest! #LI-CL1
    $37k-59k yearly est. Auto-Apply 8d ago
  • Member of Global Operations, Information & Security (Business Continuity & Disaster Recovery)

    Anchorage Digital

    Remote job

    At Anchorage Digital, we are building the world's most advanced digital asset platform for institutions to participate in crypto. Anchorage Digital is a crypto platform that enables institutions to participate in digital assets through custody, staking, trading, governance, settlement, and the industry's leading security infrastructure. Home to Anchorage Digital Bank N.A., the only federally chartered crypto bank in the U.S., Anchorage Digital also serves institutions through Anchorage Digital Singapore, Porto by Anchorage Digital, and other offerings. The company is funded by leading institutions including Andreessen Horowitz, GIC, Goldman Sachs, KKR, and Visa, with its Series D valuation over $3 billion. Founded in 2017 in San Francisco, California, Anchorage Digital has offices in New York, New York; Porto, Portugal; Singapore; and Sioux Falls, South Dakota. Learn more at anchorage.com, on X @Anchorage, and on LinkedIn. As a key Member of Global Operations, Information & Security, with a critical focus on Business Continuity and Disaster Recovery (BCDR), you will have the opportunity to develop and scale a forward-looking program that is expertly tailored to our business and compliant with necessary regulatory requirements, including those established by the FFIEC and NIST. Reporting to our Business Continuity and Disaster Recovery Lead, you will be responsible for maintaining relevant policies and procedures, and for communicating and supporting the implementation of program elements across business lines to grow and maintain a holistic program that ensures Anchorage Digital's resilience against disruption and guarantees a timely recovery of business operations in the unlikely event of an interruption. With guidance from the Business Continuity and Disaster Recovery Lead, and informed by Anchorage Digital's operational business needs, you will apply strategies and develop tactical solutions that continuously advance the maturity of Anchorage Digital's resilience to interruption via the business continuity program. You are responsible for supporting the operationalization of established strategies and the implementation of programmatic enhancement initiatives from conception to completion. You are also responsible for ensuring these initiatives continue to perform as expected once they have transitioned into business-as-usual operations. You are expected to help drive the development of company goals and objectives and guide the long-term strategy of an enterprise-wide business continuity and disaster recovery program, ensuring program processes are executed consistently and successfully. We are seeking a leader with the ability to guide complex projects and influence the overall Anchorage Digital culture. You not only understand the “why” and the “bigger picture,” you prioritize the work accordingly and with limited direction. Additionally, and in support of this work, you will have cross-team exposure and will be recognized as a reliable partner who offers expertise and leadership within and outside the CISO organization. We have created the Factors of Growth & Impact to help Villagers better measure impact and articulate coaching, feedback, and the rich and rewarding learning that happens while exploring, developing, and mastering the capabilities and contributions within and outside of the Member of Global Operations role:Technical Skills: Knowledge and experience with key regulatory and industry frameworks and standards on BCM: FFIEC IT Examination Handbook on BCM, NIST SP 800-34, or ISO 22301, and their related application to each aspect of a compliant BCM program. A deep understanding of cloud infrastructure configurations and architecture, disaster recovery plan development and management, and general concepts of information security and IT risk management. A strong ability to "translate" relevant regulation into technical controls; and, conversely, possess the ability to explain how existing and / or net-new controls are suitably designed to meet regulatory requirements. A strong ability to independently conduct and critically assess Business Impact Analysis (BIA) and Business Continuity Plan (BCP) updates, and collaborate with functional lead SMEs to accurately translate and account for speculative business impacts and recovery requirements in BIA and BCP documentation. Excellent communication and program management skills to drive stability and successful execution in a fast-moving environment. Complexity and Impact of Work: Support, scale, and improve Anchorage Digital's resilience, business continuity, and disaster recovery programs based on applicable risks, regulatory requirements, and industry guidance, and be accountable for assigned work by identifying, resolving, and escalating blockers and dependencies. Collaborate with enterprise business groups to develop and implement best practices designed to protect and restore data, systems, and business processes following anticipated or unanticipated disruptions. Track meaningful reporting, metrics, analysis, and controls commensurate with both business needs and regulatory expectations. Support the execution of established resilience, business continuity, and disaster recovery strategies, guiding initiatives from conception to completion, in concert with external technology providers. Maintain enterprise-wide business continuity and disaster recovery program documentation commensurate with regulatory guidance, such as the FFIEC IT Handbook. Maintain program-relevant Bank controls and identify, report, and control incidents relevant to Bank services. Resolve internal and external audit issues, including the implementation of management action plans. Support the execution and documentation of periodic tabletop and functional exercises in collaboration with and across business units and critical third-party service providers. Organizational Knowledge: Support and execute Anchorage Digital's business continuity and disaster recovery program elements, as well as maintain a control set and policy framework that satisfies regulatory requirements in an efficient and elegant manner. Collaborate with and guide each department to build and maintain enterprise-wide operational resilience, along with business continuity and disaster recovery programs, commensurate with changing business needs and industry and regulatory standards. Propose changes to the Bank's business continuity and disaster recovery strategy when necessary or beneficial to Anchorage Digital's objectives. Collaborate with the Anchorage Digital Third Party Risk Management team to independently conduct onboarding and ongoing monitoring due diligence evaluations of third-party service provider BCM documentation; assess and document an opinion as to the adequacy of third-party provided BCM documentation. Communication and Influence: Communicate program concepts effectively across all operational functions, as well as to business leaders at all levels. Communicate risks and influence the implementation of measures necessary to mitigate those risks to the Bank. Assist in the development of business continuity and disaster recovery program reports for senior management teams. Create effective relationships across the enterprise and communicate program goals, needs, and capabilities to stakeholders. You may be a fit for this role if you have: Exceptional attention to detail and are highly organized. A passion for improving existing processes. A highly reliable and proactive communication style. Excellent soft skills, including the ability to adapt communication for both internal and external stakeholders at all levels of seniority in an effective manner, bridging gaps with empathy, patience, and proactive communication. Experience using: the Google Workspace office suite; AuditBoard GRC tooling solutions; Linear; Notion; Slack; Jira; and Whimsical. Knowledge of cloud infrastructure dashboards and consoles (e.g., Google Cloud Platform). Exposure to or interactions with supervisory examination personnel (e.g., OCC). Although not a requirement, bonus points if: You have relevant industry certifications. You have familiarity with Operational Risk Management; Audit, Governance, Risk, and Compliance software implementation and configuration (AuditBoard). You understand and have experience with baseline physical security measures. You were emotionally moved by the soundtrack to Hamilton, which chronicles the founding of a new financial system. :) About Anchorage Digital: Who we are The Anchorage Village, what we call our team, brings together the brightest minds from platform security, financial services, and distributed ledger technology to provide the building blocks that empower institutions to safely participate in the evolving digital asset ecosystem. As a diverse team of more than 300 members, we are united in one common goal: building the future of finance by providing the foundation upon which value moves safely in the new global economy. Anchorage Digital is committed to being a welcoming and inclusive workplace for everyone, and we are intentional about making sure people feel respected, supported, and connected at work-regardless of who you are or where you come from. We value and celebrate our differences and we believe being open about who we are allows us to do the best work of our lives. Anchorage Digital is an Equal Opportunity Employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or veteran status. Anchorage Digital considers qualified applicants regardless of criminal histories, consistent with other legal requirements. “Anchorage Digital” refers to services that are offered either through Anchorage Digital Bank National Association, an OCC-chartered national trust bank, or Anchorage Lending CA, LLC a finance lender licensed by the California Department of Financial Protection and Innovation, License No. 60DBO-11976, or Anchorage Digital Singapore Pte Ltd, a Singapore private limited company, all wholly-owned subsidiaries of Anchor Labs, Inc., a Delaware corporation. Protecting your privacy rights is important to Anchorage Digital, and we work to maintain the trust and confidence of our clients when handling personal or financial information. Please see our privacy policy notices here.
    $31k-40k yearly est. Auto-Apply 13d ago
  • Governance Specialist - Security

    Mosaic Health 4.0company rating

    Remote job

    The Governance Specialist is responsible for supporting apree health's governance, risk, and compliance programs to ensure adherence to regulatory, contractual, and internal security requirements. This role will manage customer audits, maintain certifications, and coordinate responses to security questionnaires. The specialist will work closely with internal teams and external partners to demonstrate our commitment to protecting sensitive healthcare data and meeting industry standard How will you make an impact & Requirements Key Responsibilities: Continuously refine and optimize organizational security certification (e.g., HITRUST, SOC 2) and customer security audit strategies, overseeing security related evidence collection, control validation, and audit readiness to ensure sustained compliance and successful renewals. Author, review, and proactively enhance comprehensive responses to security questionnaires and due diligence requests from healthcare partners and customers, leveraging deep knowledge of security controls, technical architecture and organizational posture to articulate apree health's security capabilities effectively. Act as a subject matter expert and trusted advisor to internal stakeholders, interpreting security related compliance obligations, providing guidance on control implementation, and fostering a culture of security awareness across the organization. Collaborate closely with vendor management, security, privacy and compliance teams to quantify, capture or rationalize risks and corresponding mitigating controls. Work cross-functionally with business units to identify risks, and oversee the design and implementation of controls that improve security posture. Maintain a thorough understanding of apree's tech stack, architecture and controls to provide concise go-to-market and customer support. Assist with tracking governance and compliance metrics and contribute to risk management activities. Stay up to date with changes in regulatory and compliance requirements affecting healthcare data security. Qualifications: Bachelor's degree in Information Systems, Business, or related field. 3-5 years of experience in IT governance, risk, and compliance, preferably in healthcare with a deep understanding of security controls and architecture. Familiarity with HIPAA, HITRUST, ISO, SOC2, and other security frameworks. Demonstrated ability to quantify risk, identify mitigations and enact change. Strong organizational skills with the ability to manage multiple projects and deadlines. Excellent written and verbal communication skills, with a proven ability to articulate complex technical and compliance concepts clearly and concisely to diverse audiences, including executive leadership and external partners. Compensation: $74,083K - $111,125K annual salary
    $22k-33k yearly est. Auto-Apply 21d ago

Learn more about head of security jobs