Be an early applicantLess than 25 applicants

Company

Checkmarx · 6 hours ago

Information System Security Specialist

United States

Full-time

Remote

Entry, Mid Level

2+ years exp

Maximize your interview chances

Enterprise SoftwareSaaS

Actively Hiring

No H1B

U.S. Citizen Only

Insider Connection @Checkmarx

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Work with various stakeholders across the company in communicating the FedRAMP requirements and maintaining FedRAMP-compliant policies and procedures.

Maintain the Continuous Monitoring Plan.

Conduct security and privacy reviews of proposed changes to the system

Support the GRC Manager in maintaining a variety of compliance regimes within Checkmarx.

Drive the organization towards implementing and updating policies and procedures that meet multiple compliance requirements.

Support the management of Checkmarx’s Governance, Risk, and Compliance (GRC) platform.

Work with auditors and assessors to demonstrate security compliance and resolve findings.

Collaborate with system owners, developers, and other stakeholders to ensure security is integrated into system development and operations.

Support the GRC Manager in providing security training and awareness programs for end users.

Support multiple teams as they prepare the necessary documentation for the system and processes.

Provide teams with clear guidance on requirements, and review/approve their products based on meeting the FedRAMP requirements.

Maintain and implement the taskings for the required documentation.

Support the GRC Manager in reviewing and updating processes in compliance with the approved FedRAMP controls.

Create and maintain security documentation, risk assessments, and incident response plans.

Develop and enforce policies, guidelines, and procedures to ensure compliance with regulatory requirements.

Create and maintain the Plan of Action and Milestones (POA&M).

Work with key stakeholders to implement the necessary remediation actions.

Track to closure of all remediation efforts.

Ensure that leadership maintains an accurate understanding of the current risks being tracked.

Ensure security controls are properly designed and function as intended.

Conduct risk assessments and security audits to evaluate system compliance.

Provide support to the incident response team to ensure that the system has been restored to compliant configuration.

Lead effort to identify the risks associated with incidents and to work with the appropriate stakeholders to implement the necessary remediation activities.

Monitor security systems and conduct continuous monitoring to detect potential vulnerabilities or incidents.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

FedRAMPInformation SecuritySecurity ComplianceNIST 800-53FISMAISO 27001CISSPRisk ManagementIncident ResponseVulnerability ManagementSecurity DocumentationSystem Engineering