Assyst Tecnologia

Assyst Tecnologia provides innovative technology solutions and services for businesses to thrive in the digital age.

Wireless Telecommunication Services

Telecommunication Services

1-10 (3)

4 open positions

Links

View All Jobs

Cybersecurity Risk Advisor

11 hours, 13 minutes ago

United States

Full-time

Lead

Penetration Tester

Cybersecurity

Cybersecurity HIPAA

Apply Now

Assyst Tecnologia

Assyst Tecnologia provides innovative technology solutions and services for businesses to thrive in the digital age.

Wireless Telecommunication Services

1-10

View All Jobs 4

Description

Evaluate, maintain, and communicate the risk posture of FISMA systems to executive leadership.
Make risk-based recommendations and serve as a subject matter expert on the Risk Management Framework (RMF).
Support stakeholders in implementing and enforcing Acceptable Risk Safeguards and RMF procedures and standards.
Ensure information security and privacy testing is performed throughout the SDLC and considered during development.
Review proposed information security and privacy artifacts and provide recommendations to the ISSO.
Guide stakeholders on actions, strategies, and best practices for closing identified weaknesses.
Approve selected system configuration deviations from the required baseline.
Coordinate with ISSOs and other points of contact for FISMA systems or PII/PHI collections to identify information types and assign security categorizations.
Ensure legal authority for activities involving PII/PHI and determine privacy impacts.
Manage information security and privacy risk.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
CISSP, CISM, or other relevant certifications preferred.
10+ years of professional experience developing and implementing information security/assurance programs, policies, processes, and procedures.
Experience working with security frameworks, laws, standards, and directives such as FISMA, OMB directives, Presidential Directives, NIST SP 800 series, FIPS, HIPAA, and the Privacy Act.
Comprehensive knowledge of FISMA, HIPAA, and the Privacy Act of 1974.
In-depth knowledge of NIST SP 800 series documents, especially 800-34, 37, 39, 47, 53, 53A, 60, 63, 64, and 137.
In-depth knowledge of NIST SP 800-53 security control requirements and implementation methods.
Practical knowledge of IT system contingency planning.
Understanding of risk assessment and risk management concepts.
Good understanding of continuous monitoring, continuous authorization, PII protection, and PIA concepts.
Expert use of MS Office, especially Word, PowerPoint, and Outlook.

Benefits

Medical, dental, and vision insurance.
401(k) retirement plan.
Disability insurance.
Flexible spending accounts.
A benefits package designed to support work/life balance.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Microsoft Security Consultant

Quisitive 1K-5K Internet Software & Services

Quisitive is hiring a Microsoft Security Consultant to work with clients on assessing risk, designing and implementing Microsoft security solutions, and improving security maturity across Microsoft cloud and security environments.

Anywhere Full-time Mid Level Penetration Tester

Active Directory Azure Network Security PowerShell SOC

10 hours, 43 minutes ago

Apply

10 hours, 43 minutes ago

Fractional Cyber Security Analyst (Advisor Network)

Arootah 11-50 Professional Services

Arootah is seeking an experienced Cybersecurity Analyst to join its advisor network and support hedge fund and family office clients on project-based cybersecurity engagements.

Anywhere Contract Senior Penetration Tester Security Analyst

$260k-$520k

Active Directory Azure Cybersecurity Encryption Network Security Penetration Testing SQL Windows Server

11 hours, 28 minutes ago

Apply

11 hours, 28 minutes ago

Fractional Chief Information Security Officer (Advisor Network)

Arootah 11-50 Professional Services

Arootah is seeking experienced Chief Information Security Officers to provide project-based cybersecurity consulting for alternative investment clients, including hedge funds, private equity firms, and family offices.