{ "count" : 120730, "data" : [ { "id" : "6a2abe2074d8ee00a06ecaa5", "title" : "Cybersecurity – Information System Security Manager (ISSM)", "company" : "Boeing", "salary" : { "min" : 130900.0, "max" : 189750.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Tukwila, WA", "locations" : [ "USA - Tukwila, WA", "United States of America" ], "certifications" : [ "CISSP", "GSLC", "CISM" ], "timestamp" : "2026-06-14T22:56:40.272", "fingerprint" : "566d24a9b1613b4261fb0e46b5511e82a6599262bc813602cd9f602bcf153573", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Tukwila-WA/Cybersecurity---Information-System-Security-Manager--ISSM-_JR2026514381-1", "externalId" : "JR2026514381", "locationPoint" : "47.47399,-122.26096", "structuredLocations" : [ { "city" : "Tukwila", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.4627356,-122.2559156" } ], "locationText" : "Tukwila, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "Cybersecurity, DFARS, NIST SP 800-171, CMMC, RMF, DAAPM, CNSSI 1253, ICD-503, JSIG, NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, HBSS", "professionalSkills" : [ "Risk management", "Program management", "Security governance", "Configuration management", "Incident response" ], "hardSkillsList" : [ "Security analysis", "Risk assessment", "Incident response", "Hardware inventory", "Software inventory" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security analysis", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Hardware inventory", "level" : "intermediate" }, { "name" : "Software inventory", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cybersecurity, DFARS, NIST SP 800-171, CMMC", "majorSkillsList" : [ "Cybersecurity", "DFARS", "NIST SP 800-171", "CMMC" ], "coreResponsibilities" : "Lead ISSOs performing cybersecurity governance, Perform security analysis, Assess compliance with standards, Oversee configuration management, Ensure security posture integrity, Lead staff with assessments, Document state of compliance, Conduct risk assessments, Execute risk mitigations, Oversee incident response, Conduct inventory assessments, Serve as organization spokesperson, Advise management on research, Interface with government customers, Implement protective mechanisms", "teamCollaboration" : "Program stakeholders; Government customers; Company personnel", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Controlled Unclassified Information (CUI); DFARS; NIST SP 800-171; CMMC; Risk Management Framework (RMF)", "domainList" : [ "controlled-unclassified-information-cui", "dfars", "nist-sp-800-171", "cmmc", "risk-management-framework-rmf" ], "domainSpecificKnowledge" : [ "Controlled Unclassified Information (CUI)", "DFARS", "NIST SP 800-171", "CMMC", "Risk Management Framework (RMF)" ], "toolProficiency" : [ "NESSUS", "ACAS", "DISA STIGs", "SCAP", "Audit Reduction", "HBSS" ], "communicationSkills" : "Technical research; Government interface", "documentationSkills" : "Security documentation; System Security Plans; POA&Ms", "problemSolvingSkills" : "Risk assessment; Remediation", "specialRequirements" : "U.S. Citizenship Required, U.S. Person required", "outcomesObjectives" : "Ensure continuous compliance; Protect CUI", "qualificationsBasic" : "IAM Level III certification, 5+ years RMF experience, 3+ years DFARS/NIST SP 800-171 controls, 3+ years CMMC requirements experience, U.S. Secret Security Clearance", "qualificationsPreferred" : "5+ years ISSO/ISSM experience, 5+ years RMF tool experience, 5+ years assessing compliance data", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Cybersecurity – Information System Security Manager (ISSM) **Company:** The Boeing Company Boeing Classified Cybersecurity is currently seeking a highly motivated **Cybersecurity – Information System Security Manager (ISSM)** to join the team in Mesa, AZ; El Segundo, CA; Huntington Beach, CA; or Tukwila, WA. The selected candidate will lead implementation and sustainment of DFARS/NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) controls for systems handling Controlled Unclassified Information (CUI), ensuring continuous compliance, risk management, and overall program management of a large portfolio of systems. The ISSM will develop and maintain security documentation (including System Security Plans and POA&Ms), coordinate audits and remediation with program stakeholders and assessors, and drive ongoing monitoring to protect CUI in accordance with DFARS 252.204-7012 and CMMC requirements. **Position Responsibilities:** * Leads a team of ISSOs performing cybersecurity governance work on CUI, DFARS, and CMMC systems * Performs security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards * Oversees configuration management of assigned systems; auditing systems to ensure security posture integrity * Leads staff with assessments and test/analysis data to document state of compliance with security requirements * Conducts risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities * Conducts periodic hardware/software inventory assessments * Serves as organization spokesperson on advanced projects and programs * Acts as advisor to management and customers on advanced technical research studies * Interfaces with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements **Basic Qualifications (Required Skills/Experience):** * Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM) * 5+ years of experience with cyber security policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series * 3+ years of experience implementing and sustaining Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012/National Institute of Standards and Technology (NIST) SP 800-171 controls and mapping to Cybersecurity Maturity Model Certification (CMMC) requirements **Preferred Qualifications (Desired Skills/Experience):** * 5+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs * 5+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS * 5+ years of experience assessing and documenting test or analysis data to show cyber security compliance **Conflict of Interest:** Successful candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $130,900 - $189,750 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Cybersecurity – Information System Security Manager (ISSM) at Boeing. Skills: Cybersecurity, DFARS, NIST SP 800-171, CMMC. Lead ISSOs performing cybersecurity governance. Perform security analysis", "postedDate" : "2026-06-11T03:51:49.191", "createdAt" : "2026-06-12T03:51:49.136", "lastUpdated" : "2026-06-14T22:56:40.272", "ingestTimestamp" : "2026-06-12T03:51:49.136", "mongoId" : "6a2abe2074d8ee00a06ecaa5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Tukwila-WA/Cybersecurity---Information-System-Security-Manager--ISSM-_JR2026514381-1", "salaryAnnualMin" : 130900, "salaryAnnualMax" : 189750, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security analysis", "Risk assessment", "Incident response", "Hardware inventory", "Software inventory", "Leadership", "Cybersecurity", "DFARS", "NIST SP 800-171", "CMMC", "Risk management", "Program management", "Security governance", "Configuration management", "Controlled Unclassified Information (CUI)", "Risk Management Framework (RMF)", "CISSP", "GSLC", "CISM", "NESSUS", "ACAS", "DISA STIGs", "SCAP", "Audit Reduction", "HBSS" ], "skillCount" : 25, "jobCategory" : "engineering", "seniorityLevel" : "manager", "dataQualityScore" : 1.0, "_score" : 1606.9987, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a305b5ff292fd229cf5cfa2", "title" : "Information System Security Officer (ISSO)", "industry" : "Government", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Information System Security Officer in the United States, adjusted for mid-seniority and government industry in the Wright Patterson Air Force Base area." }, "location" : "Wright Patterson Air Force Base, OH", "locations" : [ "Wright Patterson Air Force Base, OH" ], "certifications" : [ "DoD 8570.01-M IAM Level II or III", "CISSP" ], "timestamp" : "2026-06-16T05:21:20.586", "fingerprint" : "baef343129e02bf44b7e8af56e282c0f7f9b2e0a17dd10febc2179967883b57a", "source" : "jazzhr", "language" : "en", "externalId" : "IUvLm6nPQp", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Wright Patterson Air Force Base", "state" : "Ohio", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.8219053,-84.0495886" } ], "locationText" : "Wright Patterson Air Force Base, Ohio, United States", "technicalSkills" : "RMF, DIACAP, NIST", "majorSkills" : "Information Security, Risk Management, Cybersecurity", "majorSkillsList" : [ "Information Security", "Risk Management", "Cybersecurity" ], "coreResponsibilities" : "Develop and maintain security documentation, Conduct security assessments, Implement security controls, Monitor system security, Respond to security incidents, Provide security training, Ensure compliance with regulations", "teamCollaboration" : "System administrators; Developers; Security team", "domainKnowledge" : "DoD security requirements; RMF framework; DIACAP framework; NIST guidelines", "domainList" : [ "dod-security-requirements", "rmf-framework", "diacap-framework", "nist-guidelines" ], "domainSpecificKnowledge" : [ "DoD security requirements", "RMF framework", "DIACAP framework", "NIST guidelines" ], "communicationSkills" : "Security briefings", "documentationSkills" : "Security documentation", "problemSolvingSkills" : "Risk analysis", "specialRequirements" : "Security clearance", "qualificationsBasic" : "5+ years ISSO experience, Bachelor's degree, DoD 8570.01-M IAM Level II or III certification", "qualificationsPreferred" : "Master's degree, CISSP certification", "workSiteFlexibility" : "Onsite", "summaryDescription" : "Information System Security Officer (ISSO). Skills: Information Security, Risk Management, Cybersecurity. Develop and maintain security documentation. Conduct security assessments", "createdAt" : "2026-06-15T22:22:43.417", "lastUpdated" : "2026-06-16T05:21:20.586", "ingestTimestamp" : "2026-06-15T22:22:43.417", "mongoId" : "6a305b5ff292fd229cf5cfa2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Information Security", "Risk Management", "Cybersecurity", "DoD security requirements", "RMF framework", "DIACAP framework", "NIST guidelines", "DoD 8570.01-M IAM Level II or III", "CISSP" ], "skillCount" : 9, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.44444445, "_score" : 1194.9998, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305b76f292fd229cf5e059", "title" : "Associate Director, Information Security Risk", "company" : "EQT Group", "industry" : "FinTech", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for an Associate Director, Information Security Risk in Financial Services in Warsaw, Poland, adjusted for director-level seniority and full-time employment." }, "location" : "Warszawa, Masovian Voivodeship, Poland", "locations" : [ "Warszawa", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CISM", "CRISC", "CISSP" ], "timestamp" : "2026-06-16T08:06:33.159", "fingerprint" : "952a1d4d8a31c3e333437b382c388dfa4b1e6fbad80af07de3bcbf4abb568f95", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/eqtpartners/jobs/4897613101", "externalId" : "4897613101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warszawa", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warszawa, Masovian Voivodeship, Poland", "experienceMinYears" : 10, "experienceLevel" : "Director", "technicalSkills" : "DORA, NIS2, ISO 27001, NIST", "professionalSkills" : [ "Risk assessment", "Control design", "Governance design" ], "hardSkillsList" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Vendor risk assessments", "Incident response", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions" ], "hardSkills" : [ { "name" : "Information security risk", "level" : "intermediate" }, { "name" : "Cybersecurity governance", "level" : "intermediate" }, { "name" : "Technology risk", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Vendor risk assessments", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Cybersecurity technologies", "level" : "intermediate" }, { "name" : "Cybersecurity architectures", "level" : "intermediate" }, { "name" : "Cybersecurity solutions", "level" : "intermediate" } ], "majorSkills" : "Information security risk, Cybersecurity governance, Regulatory frameworks", "majorSkillsList" : [ "Information security risk", "Cybersecurity governance", "Regulatory frameworks" ], "coreResponsibilities" : "Identify security risks, Assess security risks, Track security risks, Escalate material issues, Design security controls, Implement security controls, Draft information security policies, Maintain information security policies, Enforce information security policies, Lead implementation regulatory frameworks, Monitor emerging obligations, Oversee information security component, Define vendor security requirements, Track remediation identified gaps, Coordinate response activities, Ensure governance obligations met, Lead post-incident reviews, Produce board-ready reporting, Produce risk appetite dashboards, Produce briefing materials", "teamCollaboration" : "Across global footprint; Across functions; With CISO; With governance forums; With Technology teams", "domainKnowledge" : "Regulated financial services; Cross-border regulatory dynamics; Third-party vendor risk; Critical outsourcing; Cyber incident response; Information security policies; Security risk frameworks; Technology risk; Asset management; Private equity; Banking; Financial services", "domainList" : [ "regulated-financial-services", "cross-border-regulatory-dynamics", "third-party-vendor-risk", "critical-outsourcing", "cyber-incident-response", "information-security-policies", "security-risk-frameworks", "technology-risk", "asset-management", "private-equity", "banking", "financial-services" ], "domainSpecificKnowledge" : [ "Regulated financial services", "Cross-border regulatory dynamics", "Third-party vendor risk", "Critical outsourcing", "Cyber incident response", "Information security policies", "Security risk frameworks", "Technology risk", "Asset management", "Private equity", "Banking", "Financial services" ], "communicationSkills" : "Board-ready reporting; Risk appetite dashboards; Briefing materials; Senior audiences; Board-level audiences", "qualificationsBasic" : "10 years information security risk, 10 years cybersecurity governance, 10 years technology risk, Build security risk frameworks, Operate security risk frameworks, Implement regulatory frameworks, Lead third-party vendor risk assessments, Solid background incident response, Advise technology teams, Credibly challenge technology teams, Distil technical topics, Distil risk topics", "qualificationsPreferred" : "CISM, CRISC, CISSP, Experience international team, Experience matrix organisation, Familiarity digital tools, Familiarity workflow automation, Exposure data governance obligations, Contribute board reporting, Contribute senior governance reporting", "rawDescription" : "EQT is looking for an Associate Director, Information Security Risk to serve as the firm's subject matter expert on information security risk — translating complex cybersecurity and technology risk into clear governance frameworks and actionable business outcomes. This is a senior individual contributor role sitting within the CISO function, reporting directly to the CISO, and operating across a global, regulated financial services environment. About the Team Risk, Regulatory, Compliance identify, assess and track security risks across the firm and escalate material issues to the CISO and relevant governance forums. Design and implement pragmatic, proportionate security controls that balance risk reduction with business agility. Draft, maintain and enforce information security policies, standards and procedures aligned to regulatory requirements and industry best practice. Lead implementation of applicable regulatory frameworks across EQT's global footprint (including DORA, NIS2, ISO 27001 and NIST) and monitor the horizon for emerging obligations. Oversee the information security component of third-party vendor risk reviews, including critical outsourcing assessments; define vendor security requirements and track remediation of identified gaps. Play a central role in EQT's cyber incident response capability — coordinating response activities, ensuring governance obligations are met, and leading post-incident reviews. Produce high-quality, board-ready reporting, risk appetite dashboards and briefing materials for senior management and governance committees. About You You are a seasoned information security risk professional with a commercial mindset and a talent for making complex risk topics accessible to senior audiences. You build trust across functions naturally, hold your ground on risk positions constructively, and bring genuine intellectual rigour to governance and control design. What you'll bring (must-have): Around 10 years of experience in information security risk, cybersecurity governance, or technology risk within asset management, private equity, banking or financial services. Proven track record building and operating security risk and control frameworks in a regulated financial services environment. Hands-on experience implementing regulatory frameworks such as DORA, NIS2, ISO 27001 or NIST, with solid understanding of cross-border regulatory dynamics. Demonstrated experience leading third-party vendor risk assessments, including outsourcing and critical supplier reviews. Solid background in incident response, from operational coordination through to governance reporting and lessons learned. Deep working knowledge of cybersecurity technologies, architectures and solutions, sufficient to advise and credibly challenge Technology teams. Strong communication skills with the ability to distil complex technical and risk topics into concise, impactful materials for senior and board-level audiences. Nice to have: Relevant professional qualifications such as CISM, CRISC or CISSP. Experience working within an international team or matrix organisation. Familiarity with digital tools and workflow automation that enhance team efficiency and risk reporting. Exposure to data governance obligations and their intersection with information security risk. Prior experience contributing to board or senior governance committee reporting in a financial services context. What We Offer At EQT, you will join a global firm that operates at the intersection of technology, finance and impact. You will have direct access to senior leadership, meaningful scope to shape how information security risk is governed at a complex, internationally active firm, and the opportunity to work alongside colleagues who hold themselves and each other to a high standard. EQT supports continuous professional development and values diverse perspectives as a driver of better outcomes. Compensation We understand and believe that being a great place to work drives the best performance.At EQT, inclusion is a business imperative and it's embedded into our talent strategy, decision-making, and culture to ensure that every individual and team operates at their full potential. By doing so, we unlock better collaboration, stronger innovation, and superior investment outcomes. About EQT EQT is a purpose-driven global investment organization focused on active ownership strategies. With a Nordic heritage and a global mindset, EQT has a track record of over three decades of developing companies across multiple geographies, sectors and strategies. EQT has investment strategies covering all phases of a business’ development, from start-up to maturity. EQT has EUR ‌270 billion in total assets under management (EUR ‌‌141 billion in fee-generating assets under management), within two business segments – Private Capital and Real Assets. With its roots in the Wallenberg family’s entrepreneurial mindset and philosophy of long-term ownership, EQT is guided by a set of strong values and a distinct corporate culture. EQT manages and advises funds and vehicles that invest across the world with the mission to future-proof companies, generate attractive returns and make a positive impact with everything EQT does. EQT has offices in more than 25 countries across Europe, Asia and the Americas and has more than 1,900 employees. More info: www.eqtgroup.com Follow EQT on LinkedIn, X, YouTube and Instagram", "summaryDescription" : "Associate Director, Information Security Risk at EQT Group. Skills: Information security risk, Cybersecurity governance, Regulatory frameworks. Identify security risks. Assess security risks", "postedDate" : "2026-06-15T23:23:26.048", "createdAt" : "2026-06-15T23:23:26.048", "lastUpdated" : "2026-06-16T08:06:33.159", "ingestTimestamp" : "2026-06-15T23:23:26.048", "mongoId" : "6a305b76f292fd229cf5e059", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Vendor risk assessments", "Incident response", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions", "Regulatory frameworks", "Risk assessment", "Control design", "Governance design", "Regulated financial services", "Cross-border regulatory dynamics", "Third-party vendor risk", "Critical outsourcing", "Cyber incident response", "Information security policies", "Security risk frameworks", "Asset management", "Private equity", "Banking", "Financial services", "CISM", "CRISC", "CISSP" ], "skillCount" : 27, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 1032.5258, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305182f292fd229cf0181f", "title" : "Senior Manager, Information Security", "company" : "Stanley 1913", "salary" : { "min" : 150000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, United States", "locations" : [ "Seattle", "Washington", "United States" ], "timestamp" : "2026-06-16T08:55:12.146", "fingerprint" : "416c22c3585eafa5ab1c1c6432458aa19d722f28e0521a05199e58841e2d6d0a", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/stanley1913-us/jobs/5213919008", "externalId" : "5213919008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "rawDescription" : "About us: Stanley 1913 - Built for Life® since 1913. The Stanley 1913 brand has fueled the human experience since the iconic Stanley vacuum bottle revolutionized the way people enjoyed food and beverage. Today, our colorful and thoughtfully designed products including the popular Quencher™ series go beyond function, elevating everyday moments with style and empowering active lifestyles. We’re a community of creators, builders, and inventors who believe in creating sustainable products for a better life and world that minimizes our impact on the planet. Learn more at www.stanley1913.com.  Position Overview We are seeking a highly accomplished and strategic Senior Manager, Information Security to join our team in Seattle, WA. In this leadership role, you will drive the vision, development, and execution of enterprise-grade security programs supporting the Stanley 1913 brand, in alignment with the broader HAVI Enterprise Security strategy. You will play a critical role in scaling and maturing Stanley 1913’s security capabilities to protect consumers, partners, and business operations during a period of accelerated growth. As a senior leader, you will influence organizational strategy, guide cross-functional decision-making, and ensure that security is embedded as a core component of business innovation and digital transformation. ***Seattle location strongly preferred*** What You Will Do Lead the development and ongoing improvement of an information security strategy. This strategy protects Stanley 1913’s digital ecosystem and aligns with security priorities across HAVI and Morgan Street. Serve as a trusted advisor to executive leadership, providing expert guidance on cybersecurity risks, emerging threats, and strategic investments to strengthen organizational resilience. Drive the development and operationalization of enterprise risk management frameworks, including identifying, assessing, and mitigating cybersecurity risks across a complex setting that prioritizes customer experience. Establish and oversee robust security monitoring, detection, and response capabilities, ensuring integration into business operations and alignment with industry-leading practices. Direct incident response and crisis management efforts, including leading major incident investigations, enhancing response plans, and incorporating lessons learned into improved controls and processes. Build, lead, and develop a high-performing cybersecurity team, fostering a culture of accountability, continuous learning, and technical excellence. Partner with cross-functional leaders (IT, Product, Legal, Compliance, and Operations) to embed security into business processes, product development, and customer experiences. Champion security awareness and culture across the organization, driving training initiatives, executive reporting, and enterprise-wide engagement. Stay ahead of the evolving threat landscape, regulatory requirements, and industry guidelines, proactively adapting strategies to maintain a strong security posture. Who You Are Bachelor’s degree in Information Security, Computer Science, or a related field, with equivalent experience also considered; advanced degree (MBA or Master’s in Cybersecurity) strongly preferred. 10+ years of progressive experience in information technology, with 7+ years in information security, cybersecurity, risk management, or compliance leadership roles. Proven track record of designing and leading enterprise-scale security programs within complex, high-growth, or consumer-focused organizations. Deep expertise in security frameworks (e.g., NIST, ISO 27001), regulatory requirements, and risk management methodologies. Strong leadership experience with demonstrated ability to build, mentor, and retain high-performing teams while driving measurable outcomes. Advanced understanding of security architecture, threat detection/response, cloud security, and modern cybersecurity technologies. Certifications such as CISSP, CISM, CISA, or equivalent strongly preferred. Outstanding communication and executive presence, with the ability to influence senior collaborators and translate technical risks into business impact. #LI-Hybrid Stanley 1913 is committed to a diverse and inclusive work environment. Stanley 1913 is an equal opportunity employer and does not discriminate based on race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please reach out to recruiting@stanley1913.com. Stanley 1913 is a total rewards company, which includes rewards beyond base salary. At Stanley 1913, full-time employees are eligible for an annual bonus, based on company and individual results. In addition, we offer a variety of employee benefits, personalized time off, 14-Paid holidays, dental, vision, 401(k), and much more. The base pay range for this position is for a successful candidate within the state listed. The successful candidate’s actual pay will be based on multiple factors such as work location, job-related knowledge, skills, qualifications, and experience. Salary Range $150,000—$170,000 USD About our parent company: Morgan Street Holdings The Stanley 1913 brand is owned by Morgan Street Holdings (formerly HAVI), a privately held enterprise with a diverse portfolio of operating companies, including HAVI Supply Chain, tms, and Continental. Morgan Street Holdings’ portfolio provides best-in-class sourcing and supply chain capabilities, brand-defining marketing and promotion services, innovative consumer products, and dining and refreshment food solutions. Morgan Street Holdings employs over 10,000 people and serves 300+ customers across the globe.  Morgan Street Holdings supports the Stanley 1913 brand with competitive pay and benefits, along with exposure to diverse industries and professional networking and development opportunities.  ", "summaryDescription" : "Senior Manager, Information Security at Stanley 1913", "postedDate" : "2026-06-15T23:19:17.324", "createdAt" : "2026-06-15T23:19:17.324", "lastUpdated" : "2026-06-16T08:55:12.146", "ingestTimestamp" : "2026-06-15T23:19:17.324", "mongoId" : "6a305182f292fd229cf0181f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 170000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 1004.9446, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Retail", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305b76f292fd229cf5e05a", "title" : "Associate Director, Information Security Risk", "company" : "EQT Group", "industry" : "FinTech", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Associate Director, Information Security Risk in Financial Services in Warsaw, Poland, adjusted for Director seniority and full-time employment." }, "location" : "Warszawa, Masovian Voivodeship, Poland", "locations" : [ "Warszawa", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CISM", "CRISC", "CISSP" ], "timestamp" : "2026-06-16T08:55:33.446", "fingerprint" : "1002902146dbbaeebab6c88f26f44d9b30e387829be17cdefc2b9427c735de83", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/eqtpartners/jobs/4897327101", "externalId" : "4897327101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warszawa", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warszawa, Masovian Voivodeship, Poland", "experienceMinYears" : 10, "experienceLevel" : "Director", "technicalSkills" : "DORA, NIS2, ISO 27001, NIST", "professionalSkills" : [ "Risk assessment", "Control design", "Governance design", "Incident response", "Vendor risk management", "Policy development", "Standards development", "Procedure development" ], "hardSkillsList" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Risk reporting", "Vendor security requirements", "Cyber incident response", "Board reporting", "Risk appetite dashboards" ], "softSkillsList" : [ "Intellectual rigour", "Constructive challenge" ], "hardSkills" : [ { "name" : "Information security risk", "level" : "intermediate" }, { "name" : "Cybersecurity governance", "level" : "intermediate" }, { "name" : "Technology risk", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Risk reporting", "level" : "intermediate" }, { "name" : "Vendor security requirements", "level" : "intermediate" }, { "name" : "Cyber incident response", "level" : "intermediate" }, { "name" : "Board reporting", "level" : "intermediate" }, { "name" : "Risk appetite dashboards", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Intellectual rigour" }, { "name" : "Constructive challenge" } ], "majorSkills" : "Information security risk, Cybersecurity governance, Technology risk, Regulatory frameworks", "majorSkillsList" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Regulatory frameworks" ], "coreResponsibilities" : "Translate cybersecurity risk, Translate technology risk, Design security controls, Implement security controls, Draft information security policies, Maintain information security policies, Enforce information security policies, Lead regulatory framework implementation, Monitor emerging obligations, Oversee vendor risk reviews, Define vendor security requirements, Track remediation of gaps, Coordinate incident response, Ensure governance obligations met, Lead post-incident reviews, Produce board-ready reporting, Produce risk appetite dashboards, Produce briefing materials", "teamCollaboration" : "Across global footprint; With CISO function; With governance forums; With Technology teams; With senior management; With governance committees", "domainKnowledge" : "Financial services environment; Cross-border regulatory dynamics; Cybersecurity technologies; Cybersecurity architectures; Cybersecurity solutions; Digital tools; Workflow automation; Data governance obligations", "domainList" : [ "financial-services-environment", "cross-border-regulatory-dynamics", "cybersecurity-technologies", "cybersecurity-architectures", "cybersecurity-solutions", "digital-tools", "workflow-automation", "data-governance-obligations" ], "domainSpecificKnowledge" : [ "Financial services environment", "Cross-border regulatory dynamics", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions", "Digital tools", "Workflow automation", "Data governance obligations" ], "toolProficiency" : [ "Bloomberg Terminal", "Reuters Eikon", "FactSet" ], "communicationSkills" : "Board-level reporting; Senior audience communication", "continuousLearning" : "Continuous professional development", "problemSolvingSkills" : "Risk reduction; Risk mitigation", "qualificationsBasic" : "10 years information security risk, 10 years cybersecurity governance, 10 years technology risk, Build security risk frameworks, Operate security risk frameworks, Implement regulatory frameworks, Lead third-party vendor risk assessments, Solid background incident response, Advise technology teams, Credibly challenge technology teams, Distil technical topics, Distil risk topics", "qualificationsPreferred" : "CISM, CRISC, CISSP, Experience international team, Experience matrix organisation, Familiarity digital tools, Familiarity workflow automation, Exposure data governance obligations, Contribute board reporting, Contribute senior governance reporting", "rawDescription" : "EQT is looking for an Associate Director, Information Security Risk to serve as the firm's subject matter expert on information security risk — translating complex cybersecurity and technology risk into clear governance frameworks and actionable business outcomes. This is a senior individual contributor role sitting within the CISO function, reporting directly to the CISO, and operating across a global, regulated financial services environment. About the Team Risk, Regulatory, Compliance identify, assess and track security risks across the firm and escalate material issues to the CISO and relevant governance forums. Design and implement pragmatic, proportionate security controls that balance risk reduction with business agility. Draft, maintain and enforce information security policies, standards and procedures aligned to regulatory requirements and industry best practice. Lead implementation of applicable regulatory frameworks across EQT's global footprint (including DORA, NIS2, ISO 27001 and NIST) and monitor the horizon for emerging obligations. Oversee the information security component of third-party vendor risk reviews, including critical outsourcing assessments; define vendor security requirements and track remediation of identified gaps. Play a central role in EQT's cyber incident response capability — coordinating response activities, ensuring governance obligations are met, and leading post-incident reviews. Produce high-quality, board-ready reporting, risk appetite dashboards and briefing materials for senior management and governance committees. About You You are a seasoned information security risk professional with a commercial mindset and a talent for making complex risk topics accessible to senior audiences. You build trust across functions naturally, hold your ground on risk positions constructively, and bring genuine intellectual rigour to governance and control design. What you'll bring (must-have): Around 10 years of experience in information security risk, cybersecurity governance, or technology risk within asset management, private equity, banking or financial services. Proven track record building and operating security risk and control frameworks in a regulated financial services environment. Hands-on experience implementing regulatory frameworks such as DORA, NIS2, ISO 27001 or NIST, with solid understanding of cross-border regulatory dynamics. Demonstrated experience leading third-party vendor risk assessments, including outsourcing and critical supplier reviews. Solid background in incident response, from operational coordination through to governance reporting and lessons learned. Deep working knowledge of cybersecurity technologies, architectures and solutions, sufficient to advise and credibly challenge Technology teams. Strong communication skills with the ability to distil complex technical and risk topics into concise, impactful materials for senior and board-level audiences. Nice to have: Relevant professional qualifications such as CISM, CRISC or CISSP. Experience working within an international team or matrix organisation. Familiarity with digital tools and workflow automation that enhance team efficiency and risk reporting. Exposure to data governance obligations and their intersection with information security risk. Prior experience contributing to board or senior governance committee reporting in a financial services context. What We Offer At EQT, you will join a global firm that operates at the intersection of technology, finance and impact. You will have direct access to senior leadership, meaningful scope to shape how information security risk is governed at a complex, internationally active firm, and the opportunity to work alongside colleagues who hold themselves and each other to a high standard. EQT supports continuous professional development and values diverse perspectives as a driver of better outcomes. Compensation We understand and believe that being a great place to work drives the best performance.At EQT, inclusion is a business imperative and it's embedded into our talent strategy, decision-making, and culture to ensure that every individual and team operates at their full potential. By doing so, we unlock better collaboration, stronger innovation, and superior investment outcomes. About EQT EQT is a purpose-driven global investment organization focused on active ownership strategies. With a Nordic heritage and a global mindset, EQT has a track record of over three decades of developing companies across multiple geographies, sectors and strategies. EQT has investment strategies covering all phases of a business’ development, from start-up to maturity. EQT has EUR ‌270 billion in total assets under management (EUR ‌‌141 billion in fee-generating assets under management), within two business segments – Private Capital and Real Assets. With its roots in the Wallenberg family’s entrepreneurial mindset and philosophy of long-term ownership, EQT is guided by a set of strong values and a distinct corporate culture. EQT manages and advises funds and vehicles that invest across the world with the mission to future-proof companies, generate attractive returns and make a positive impact with everything EQT does. EQT has offices in more than 25 countries across Europe, Asia and the Americas and has more than 1,900 employees. More info: www.eqtgroup.com Follow EQT on LinkedIn, X, YouTube and Instagram", "summaryDescription" : "Associate Director, Information Security Risk at EQT Group. Skills: Information security risk, Cybersecurity governance, Technology risk, Regulatory frameworks. Translate cybersecurity risk. Translate technology risk", "postedDate" : "2026-06-15T23:24:48.348", "createdAt" : "2026-06-15T23:24:48.348", "lastUpdated" : "2026-06-16T08:55:33.446", "ingestTimestamp" : "2026-06-15T23:24:48.348", "mongoId" : "6a305b76f292fd229cf5e05a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Risk reporting", "Vendor security requirements", "Cyber incident response", "Board reporting", "Risk appetite dashboards", "Intellectual rigour", "Constructive challenge", "Regulatory frameworks", "Risk assessment", "Control design", "Governance design", "Incident response", "Vendor risk management", "Policy development", "Standards development", "Procedure development", "Financial services environment", "Cross-border regulatory dynamics", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions", "Digital tools", "Workflow automation", "Data governance obligations", "CISM", "CRISC", "CISSP", "Bloomberg Terminal", "Reuters Eikon", "FactSet" ], "skillCount" : 34, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 993.6051, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6db674d8ee00a091fd66", "title" : "Information System Security Engineer", "company" : "LufCo", "industry" : "Cybersecurity", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information System Security Engineer in Annapolis Junction, United States, adjusted for mid-seniority level." }, "location" : "Annapolis Junction, MD", "locations" : [ "Annapolis Junction", "MD" ], "timestamp" : "2026-06-15T04:55:42.358", "fingerprint" : "e1fe6a229bd07031131e667c6d3a762b6d359478c270973779ca48e62457d0ac", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://lufco.breezy.hr/p/0521e0b25bc7-information-system-security-engineer", "externalId" : "0521e0b25bc7", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Annapolis Junction", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.1189965,-76.7963417" } ], "locationText" : "Annapolis Junction, Maryland, United States", "employmentType" : "FULL_TIME", "coreResponsibilities" : "Leave things better than you found them, Share and share alike", "specialRequirements" : "U. S. citizen", "qualificationsBasic" : "TS/SCI with polygraph clearance", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Overview Position Title: Information System Security Engineer (PRIME Contract) Location: Annapolis Junction, MD Reports To: Technical Task Lead Job Type: Full-time Clearance Requirement: TS/SCI with polygraph, U. S. citizen Summary: Leave things better than you found them - share and share alike, le", "summaryDescription" : "Information System Security Engineer at LufCo. Leave things better than you found them. Share and share alike", "createdAt" : "2026-06-14T05:54:05.780", "lastUpdated" : "2026-06-15T04:55:42.358", "ingestTimestamp" : "2026-06-14T05:54:05.780", "mongoId" : "6a2c6db674d8ee00a091fd66", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 975.95935, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a8a7774d8ee00a0681fdf", "title" : "Cybersecurity – Information System Security Officer (ISSO)", "company" : "Boeing", "salary" : { "min" : 113050.0, "max" : 152950.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Ridley Park, PA", "locations" : [ "USA - Ridley Park, PA", "United States of America" ], "certifications" : [ "IAM Level 1 DoD 8140.03 compliant certification" ], "timestamp" : "2026-06-13T02:47:33.340", "fingerprint" : "bc0ab20ff8240feba7df8afca44b6c18182830d243e595306277245618514f06", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Ridley-Park-PA/Cybersecurity---Information-System-Security-Officer--ISSO-_JR2026496226-1", "externalId" : "JR2026496226", "locationPoint" : "39.88122,-75.3238", "structuredLocations" : [ { "city" : "Ridley Park", "state" : "Pennsylvania", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.8812236,-75.3237993" } ], "locationText" : "Ridley Park, Pennsylvania, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cybersecurity, Information Assurance, Risk Management Framework, NIST SP 800", "professionalSkills" : [ "Information System Security", "Security Analysis", "Risk Assessment", "Incident Response", "Configuration Management", "Compliance" ], "hardSkillsList" : [ "Security policy implementation", "System authorization", "Continuous monitoring", "Hardware/software inventory" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security policy implementation", "level" : "intermediate" }, { "name" : "System authorization", "level" : "intermediate" }, { "name" : "Continuous monitoring", "level" : "intermediate" }, { "name" : "Hardware/software inventory", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Information System Security, Risk Management Framework, Cybersecurity", "majorSkillsList" : [ "Information System Security", "Risk Management Framework", "Cybersecurity" ], "coreResponsibilities" : "Perform security analysis, Assess compliance with standards, Lead Assessment and Authorization (A&A) processes, Implement RMF for information systems, Facilitate MOUs, Facilitate ISAs, Facilitate RALs, Support Continuous Monitoring (CONMON), Oversee configuration management, Ensure security posture integrity, Lead staff with assessments, Document state of compliance, Conduct risk assessments, Conduct investigations, Execute risk mitigations, Oversee incident response, Conduct periodic inventory assessments, Serve as spokesperson on projects, Advise management on technical research, Interface with government customers, Interface with suppliers, Implement protective mechanisms, Ensure understanding of cybersecurity requirements, Oversee development of program information security, Deploy program information security, Meet program and enterprise requirements, Manage security compliance monitoring, Perform security compliance monitoring, Oversee security assessments, Participate in security audits, Prepare technical reports, Review technical reports, Present technical briefings, Identify root causes, Prioritize threats, Recommend corrective action, Implement corrective action, Explore industry knowledge, Explore industry methods", "teamCollaboration" : "Interface with government customers; Interface with suppliers; Work with management; Work with customers", "projectManagementSkills" : [ "Program information security" ], "domainKnowledge" : "Classified computing domains; Information System Security; Risk Management Framework; DAAG; CNSSI 1253; ICD-503; JSIG; NIST SP 800; DFARs compliance", "domainList" : [ "classified-computing-domains", "information-system-security", "risk-management-framework", "daag", "cnssi-1253", "icd-503", "jsig", "nist-sp-800", "dfars-compliance" ], "domainSpecificKnowledge" : [ "Classified computing domains", "Information System Security", "Risk Management Framework", "DAAG", "CNSSI 1253", "ICD-503", "JSIG", "NIST SP 800", "DFARs compliance" ], "toolProficiency" : [ "NESSUS", "ACAS", "DISA STIGs", "SCAP", "HBSS" ], "communicationSkills" : "Technical reports; Technical briefings", "documentationSkills" : "Memorandums of Understanding; Interconnection Security Agreements; Risk Acknowledgement Letters; Technical reports", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Active U.S. Secret Security Clearance, U.S. Citizenship Required", "qualificationsBasic" : "IAM Level 1 DoD 8140.03 compliant certification, 3+ years cybersecurity, IT, or related experience, 3+ years RMF, cybersecurity policies, RMF implementation experience", "qualificationsPreferred" : "3+ years ISSO/ISSM experience, 3+ years experience with security tools for RMF, 3+ years assessing and documenting test data, 3+ years DFARs compliance experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Cybersecurity – Information System Security Officer (ISSO) **Company:** The Boeing Company Boeing Classified Cybersecurity is currently seeking a highly motivated **Cybersecurity – Information System Security Officer (ISSO)** to join their team in **Ridley Park, PA**. The selected candidate will rely on Cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSO is responsible for maintaining and implementing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information. **Position Responsibilities:** * Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards * Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems * Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON) * Oversee configuration management of assigned systems; auditing systems to ensure security posture integrity * Lead staff with assessments and test/analysis data to document state of compliance with security requirements * Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities * Conduct periodic hardware/software inventory assessments * Serve as organization spokesperson on advanced projects and programs * Act as advisor to management and customers on advanced technical research studies * Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements **Additional Responsibilities:** * Oversee the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures * Manage and perform security compliance continuous monitoring * Oversee and participate in security assessments and audits * Prepare, review, and present technical reports and briefings * Identify root causes, prioritizes threats and recommends and/or implements corrective action * Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices **Basic Qualifications (Required Skills/Experience):** * IAM Level 1 DoD 8140.03 (previously 8570.01) compliant certification (i.e. , Security+ CE, CAP, CISSP, CASP, CISM, GSLC) * 3+ years of combined experience and/or education in cybersecurity, IT, or a related field * 3+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series) **Preferred Qualifications (Desired Skills/Experience):** * 3+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs * 3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS * 3+ years of experience assessing and documenting test or analysis data to show cyber security compliance * 3+ years of experience with DFARs compliance **Conflict of Interest:** Successful candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $113,050 – $152,950 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This is not an Export Control position. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Cybersecurity – Information System Security Officer (ISSO) at Boeing. Skills: Information System Security, Risk Management Framework, Cybersecurity. Perform security analysis. Assess compliance with standards", "postedDate" : "2026-06-11T16:32:13.076", "createdAt" : "2026-06-11T16:32:13.030", "lastUpdated" : "2026-06-13T02:47:33.340", "ingestTimestamp" : "2026-06-11T16:32:13.030", "mongoId" : "6a2a8a7774d8ee00a0681fdf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Ridley-Park-PA/Cybersecurity---Information-System-Security-Officer--ISSO-_JR2026496226-1", "salaryAnnualMin" : 113050, "salaryAnnualMax" : 152950, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security policy implementation", "System authorization", "Continuous monitoring", "Hardware/software inventory", "Leadership", "Information System Security", "Risk Management Framework", "Cybersecurity", "Security Analysis", "Risk Assessment", "Incident Response", "Configuration Management", "Compliance", "Program information security", "Classified computing domains", "DAAG", "CNSSI 1253", "ICD-503", "JSIG", "NIST SP 800", "DFARs compliance", "IAM Level 1 DoD 8140.03 compliant certification", "NESSUS", "ACAS", "DISA STIGs", "SCAP", "HBSS" ], "skillCount" : 27, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 955.0891, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2ca18874d8ee00a09a5cb5", "title" : "Information / Cybersecurity Engineer (Clearance Required)", "company" : "Nexxis Solutions", "industry" : "Government", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information/Cybersecurity Engineer in Annapolis Junction, United States, adjusted for mid-seniority level and industry." }, "location" : "Annapolis Junction, MD", "locations" : [ "Annapolis Junction", "MD" ], "timestamp" : "2026-06-15T05:13:36.867", "fingerprint" : "598c9533a9e614d34ba5de3683468e491b6e899be4b78b18ab67f9d63bcca9ec", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://nexxis-solutions.breezy.hr/p/47e43887d893-information-cybersecurity-engineer-clearance-required", "externalId" : "47e43887d893", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Annapolis Junction", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.1189965,-76.7963417" } ], "locationText" : "Annapolis Junction, Maryland, United States", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Risk assessment" ], "coreResponsibilities" : "Provide information security engineering, Provide system security engineering, Provide life cycle solutions, Provide system security testing, Provide risk assessment, Provide continuous monitoring, Provide Cybersecurity expertise", "specialRequirements" : "Clearance Required", "qualificationsBasic" : "Clearance Required", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Nexxis Solutions is supporting current and near-term efforts to provide information and system security engineering, life cycle solutions, system security testing, risk assessment, and continuous monitoring. We are looking for candidates to provide Cybersecurity expertise to systems and projects t", "summaryDescription" : "Information / Cybersecurity Engineer (Clearance Required) at Nexxis Solutions. Provide information security engineering. Provide system security engineering", "createdAt" : "2026-06-14T01:38:44.756", "lastUpdated" : "2026-06-15T05:13:36.867", "ingestTimestamp" : "2026-06-14T01:38:44.756", "mongoId" : "6a2ca18874d8ee00a09a5cb5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk assessment" ], "skillCount" : 1, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 943.794, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307371f292fd229c00211a", "title" : "Cybersecurity Network Security Specialist", "company" : "ARHS", "industry" : "Information Technology And Services", "salary" : { "min" : 105000.0, "max" : 155000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Network Security Specialist in Warsaw, Poland, adjusted for the Technology industry." }, "location" : "Warsaw, Masovian Voivodeship, Poland", "locations" : [ "Warsaw", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CCNP Security", "CCSP", "AZ-305" ], "timestamp" : "2026-06-16T10:05:41.899", "fingerprint" : "6d596a72f69922c8858a3833af24cb7a198df43530aa1956969029da8294be71", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/ARHS/744000132166709-cybersecurity-network-security-specialist", "externalId" : "744000132166709", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warsaw", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warsaw, Masovian Voivodeship, Poland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "TCP/IP, DNS, DHCP, NTP, HTTPS, SSL/TLS, PKI, Cisco, Palo Alto, Panorama, Azure, SASE, SSE, Zero Trust, WAF, Load Balancing, 802.1X, NAC", "professionalSkills" : [ "Network administration", "Network security", "Troubleshooting", "Configuration management", "Documentation", "Governance" ], "hardSkillsList" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation" ], "softSkillsList" : [ "Analytical skills", "Sense of responsibility", "Independent work", "Clear communication", "Structured mindset", "Team-oriented mindset" ], "hardSkills" : [ { "name" : "Firewall management", "level" : "intermediate" }, { "name" : "Routing", "level" : "intermediate" }, { "name" : "Switching", "level" : "intermediate" }, { "name" : "VPN management", "level" : "intermediate" }, { "name" : "Packet analysis", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical skills" }, { "name" : "Sense of responsibility" }, { "name" : "Independent work" }, { "name" : "Clear communication" }, { "name" : "Structured mindset" }, { "name" : "Team-oriented mindset" } ], "majorSkills" : "Network security, Firewall management, Cloud networking, Troubleshooting", "majorSkillsList" : [ "Network security", "Firewall management", "Cloud networking", "Troubleshooting" ], "coreResponsibilities" : "Administer network security solutions, Monitor network security solutions, Troubleshoot network security solutions, Manage firewalls, Manage routing, Manage switching, Manage secure access technologies, Ensure stable operation of enterprise network infrastructure, Support hybrid connectivity, Provide 2nd line support, Perform advanced troubleshooting, Investigate connectivity issues, Resolve connectivity issues, Investigate performance issues, Resolve performance issues, Investigate security issues, Resolve security issues, Implement network configurations, Maintain network configurations, Manage VPNs, Manage secure remote access, Manage network segmentation, Support wireless network integrations, Support wired network integrations, Identify gaps in network security controls, Propose security improvements, Support Zero Trust initiatives, Support modern security architecture initiatives, Contribute to migration efforts, Create technical documentation, Maintain technical documentation, Create operating procedures, Maintain operating procedures, Ensure adherence to network security policies, Ensure adherence to network security standards", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Network infrastructure; Cloud environments; Network security; Hybrid connectivity; Zero Trust; SASE/SSE; Cloud networking", "domainList" : [ "network-infrastructure", "cloud-environments", "network-security", "hybrid-connectivity", "zero-trust", "sase-sse", "cloud-networking" ], "domainSpecificKnowledge" : [ "Network infrastructure", "Cloud environments", "Network security", "Hybrid connectivity", "Zero Trust", "SASE/SSE", "Cloud networking" ], "toolProficiency" : [ "Panorama" ], "communicationSkills" : "Technical documentation; Operating procedures", "documentationSkills" : "Technical documentation; Operating procedures", "problemSolvingSkills" : "Troubleshooting; Analytical skills", "specialRequirements" : "Occasional travel within Europe, Driving license Category B", "qualificationsBasic" : "Understanding of TCP/IP, Understanding of routing, Understanding of network security policies, Knowledge of DNS, Knowledge of DHCP, Knowledge of NTP, Knowledge of core network services, Understanding of wired access technologies, Understanding of wireless access technologies, Knowledge of HTTPS, Knowledge of SSL/TLS, Knowledge of PKI, Knowledge of certificate-based authentication, Experience with traffic filtering, Hands-on experience with enterprise network environments, Experience with Cisco, Experience with Palo Alto, Experience with wireless solutions, Familiarity with endpoint network configurations, Azure networking, Network security controls, CCNP Security or equivalent", "qualificationsPreferred" : "CCSP or Azure AZ-305", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Arηs Group, Part of Accenture, specializes in the management of complex public sector IT projects, including systems integration, informatics and analytics, solution implementation and program management. Our team helps lead clients through digital and information systems design, bringing expertise in a variety of areas ranging from software development, data science and security management to machine learning, cloud, and mobile development. Arηs Group was acquired by Accenture in July 2024. Role Overview You will manage and secure enterprise network infrastructure across on-prem and cloud environments, ensuring reliable connectivity, strong security posture, and consistent network operations. The role combines hands-on administration, troubleshooting, and continuous improvement of network security capabilities. Responsibilities Network Security & Operations * Administer, monitor, and troubleshoot network security solutions * Manage firewalls, routing, switching, and secure access technologies * Ensure secure and stable operation of enterprise network infrastructure * Support hybrid connectivity (on-prem and cloud environments) Support & Troubleshooting * Provide 2nd line support for network and security-related incidents * Perform advanced troubleshooting (network flows, packet analysis, firewall dataplane) * Investigate and resolve connectivity, performance, and security issues Configuration & Implementation * Implement and maintain network configurations across environments * Manage VPNs, secure remote access, and network segmentation * Support wireless and wired network integrations (e.g. 802.1X, NAC) Security & Continuous Improvement * Identify gaps in network security controls and propose improvements * Support Zero Trust and modern security architecture initiatives * Contribute to migration efforts (e.g. SASE/SSE, cloud networking) Documentation & Governance * Create and maintain technical documentation and operating procedures * Ensure adherence to network security policies and standards ## Qualifications Core Networking * Strong understanding of TCP/IP, routing, and network security policies * Knowledge of DNS, DHCP, NTP and core network services * Understanding of wired and wireless access technologies Security & Encryption * Knowledge of HTTPS, SSL/TLS, PKI, and certificate-based authentication * Experience with traffic filtering (stateful/stateless) Infrastructure & Tools * Hands-on experience with enterprise network environments * Experience with Cisco (routing/switching), Palo Alto (firewalls, Panorama), wireless solutions * Familiarity with endpoint network configurations (Windows, Linux, iOS) Cloud & Modern Networking * Azure networking (VNets, segmentation, private endpoints, hybrid connectivity) * Network security controls (NSGs, routing, isolation) * Experience with SASE/SSE and Zero Trust principles is an advantage * Exposure to WAF and Load Balancing solutions Certifications * CCNP Security or equivalent (required) * CCSP or Azure AZ-305 (nice to have) Key Competencies * Strong analytical and troubleshooting skills * Attention to detail and sense of responsibility * Ability to work independently in complex environments * Clear communication with technical and non-technical stakeholders * Proactive, structured, and team-oriented mindset ## Additional Information * This role requires occasional travel within Europe (up to ~10 times/year) * Driving license (Category B) required", "summaryDescription" : "Cybersecurity Network Security Specialist at ARHS. Skills: Network security, Firewall management, Cloud networking, Troubleshooting. Administer network security solutions. Monitor network security solutions", "postedDate" : "2026-06-15T10:33:17.000", "createdAt" : "2026-06-16T01:31:53.743", "lastUpdated" : "2026-06-16T10:05:41.899", "ingestTimestamp" : "2026-06-16T01:31:53.743", "mongoId" : "6a307371f292fd229c00211a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation", "Analytical skills", "Sense of responsibility", "Independent work", "Clear communication", "Structured mindset", "Team-oriented mindset", "Network security", "Cloud networking", "Troubleshooting", "Network administration", "Configuration management", "Documentation", "Governance", "Program management", "Network infrastructure", "Cloud environments", "Hybrid connectivity", "Zero Trust", "SASE/SSE", "CCNP Security", "CCSP", "AZ-305", "Panorama" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 943.6115, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307671f292fd229c019d69", "title" : "Information Security Analyst", "company" : "Billtrust", "industry" : "FinTech", "salary" : { "min" : 1200000.0, "max" : 2000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Analyst in India, adjusted for mid-seniority, FinTech industry, and company size." }, "location" : "India", "locations" : [ "India" ], "certifications" : [ "CompTIA Security+", "CISA", "CISSP", "ISO 27001 Lead Implementer" ], "timestamp" : "2026-06-16T10:56:45.318", "fingerprint" : "eeacff322dd139ae2da3f408ae64f9e900c2547981be40941000b7701261f38c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.billtrust.com/careers/job-openings/?gh_jid=7719276003", "externalId" : "7719276003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "India", "minimumEducation" : "Bachelor's", "professionalSkills" : [ "Risk assessment" ], "majorSkills" : "Information Security, Compliance, Risk Management", "majorSkillsList" : [ "Information Security", "Compliance", "Risk Management" ], "coreResponsibilities" : "Support compliance and assurance programs, Contribute to risk assessment activities, Protect systems powering business payments platform, Assist with PCI DSS assessments, Support HIPAA BAA obligations, Document findings clearly and concisely", "teamCollaboration" : "Work closely with cross-functional teams", "domainKnowledge" : "Financial reporting controls; PCI DSS; HIPAA BAA obligations; ISMS documentation", "domainList" : [ "financial-reporting-controls", "pci-dss", "hipaa-baa-obligations", "isms-documentation" ], "domainSpecificKnowledge" : [ "Financial reporting controls", "PCI DSS", "HIPAA BAA obligations", "ISMS documentation" ], "documentationSkills" : "ISMS documentation; Control evidence", "qualificationsBasic" : "Bachelor's degree in Information Systems, Computer Science, Business, or a related field — or equivalent experience", "qualificationsPreferred" : "Exposure to GRC tools or audit management platforms, Experience supporting external audit engagements (SOC, PCI QSA, ISO certification body), Relevant certification in progress or obtained (e. g. , CompTIA Security+, CISA, CISSP, ISO 27001 Lead Implementer), Basic familiarity with vulnerability assessment tools or security monitoring platforms", "remoteFriendly" : false, "rawDescription" : "Who We Are Finance leaders choose Billtrust to get paid faster, control costs, and maximize customer satisfaction. As the leader in B2B accounts receivable workflow and payment software, we provide the world’s leading brands with AI-powered solutions across the full AR lifecycle—from invoice presentment and payment processing to cash application and collections. With over 2,600 global customers, more than $1 trillion in invoice dollars processed, and a proprietary network of 13 million buyers, Billtrust delivers business value through deep industry expertise and a culture relentlessly focused on meaningful customer outcomes. We’re an AI-first company, not just in what we build for our customers, but in how we work. Across every function, our teams use AI tools daily to work faster, make better decisions, and deliver higher-quality outcomes. We hire exceptional people, give them cutting-edge AI capabilities, and measure success by the impact they create. If you want to do the best work of your career at the frontier of AI and fintech, Billtrust is the place to do it. Our Values Customers We relentlessly increase value for customer and do the right thing for them. Action We make ‘thoughtfully fast’ decisions, act quickly, cut through red tape, deliver progress not perfection, take ownership and accountability. Team Spirit We put the team ahead of ourselves, foster trust and respect, collaborate with passion, despise toxic politics, value our differences, and celebrate together. Innovation We challenge the status quo, experiment thoughtfully, and are novel and brilliant in what we create. Excellence We love to win, but we hate losing even more. We aspire to be the best and take pride in our work. When we fall short, we own it and come back stronger. Information Security Analyst Information Security Analyst will support Billtrust's compliance and assurance programs across our key security frameworks, contribute to risk assessment activities, and help protect the systems that power our business payments platform. You'll work closely with cross-functional teams and report to the Information Security Manager. Assurance Frameworks This role directly supports Billtrust's compliance posture across the following frameworks: Framework Scope SOC 1 / ISAE 3402 Financial reporting controls maintain ISMS documentation and control evidence Assist with PCI DSS assessments, including scope validation, control testing, and QSA coordination Support HIPAA BAA obligations, including risk analysis activities and documentation of safeguards Risk ability to document findings clearly and concisely Bachelor's degree in Information Systems, Computer Science, Business, or a related field — or equivalent experience Preferred: Exposure to GRC tools or audit management platforms Experience supporting external audit engagements (SOC, PCI QSA, ISO certification body) Relevant certification in progress or obtained (e.g., CompTIA Security+, CISA, CISSP, ISO 27001 Lead Implementer) Basic familiarity with vulnerability assessment tools or security monitoring platforms", "summaryDescription" : "Information Security Analyst at Billtrust. Skills: Information Security, Compliance, Risk Management. Support compliance and assurance programs. Contribute to risk assessment activities", "postedDate" : "2026-06-16T01:21:47.894", "createdAt" : "2026-06-16T01:21:47.894", "lastUpdated" : "2026-06-16T10:56:45.318", "ingestTimestamp" : "2026-06-16T01:21:47.894", "mongoId" : "6a307671f292fd229c019d69", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Information Security", "Compliance", "Risk Management", "Risk assessment", "Financial reporting controls", "PCI DSS", "HIPAA BAA obligations", "ISMS documentation", "CompTIA Security+", "CISA", "CISSP", "ISO 27001 Lead Implementer" ], "skillCount" : 12, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 935.728, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305944f292fd229cf464d2", "title" : "Information Security Administrator", "company" : "Quadient", "industry" : "Computer Software", "salary" : { "min" : 35000.0, "max" : 45000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Entry-level Information Security Administrator in London, UK, adjusted for the technology industry and company size." }, "location" : "London, United Kingdom", "locations" : [ "London", "United Kingdom" ], "certifications" : [ "ISO 27001 Foundation", "ISO 27001 Lead Implementer", "ISO 27001 Lead Auditor", "ISO 27701 Foundation", "CompTIA Security+", "Certified Information Security Manager (CISM)" ], "timestamp" : "2026-06-16T07:26:15.723", "fingerprint" : "c0993c278432bae395c64c4263b3fb8d63a0ce4054402f7d71a8eec326407f5f", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Quadient1/744000132179212-information-security-administrator", "externalId" : "744000132179212", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "Microsoft 365, IT systems, Networks, Cloud services", "professionalSkills" : [ "Organisational skills", "Analytical thinking", "Problem-solving" ], "hardSkillsList" : [ "Risk assessment", "Supplier assessments", "Audit support" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Supplier assessments", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" } ], "majorSkills" : "Information security, ISO 27001, ISO 27701, Risk management", "majorSkillsList" : [ "Information security", "ISO 27001", "ISO 27701", "Risk management" ], "coreResponsibilities" : "Administer and maintain ISMS/PIMS, Investigate and resolve security incidents, Maintain risk registers, Ensure risks are identified, recorded, assessed, and treated, Maintain legal registers, Complete supplier security assessments, Support internal and external audits, Support management reviews, Assist with information security enquiries, Promote adherence to policies and best practices", "teamCollaboration" : "Other business areas", "domainKnowledge" : "Information security concepts; CIA triad; ISO 27001:2022; ISO 27701:2019; GDPR; Data protection principles", "domainList" : [ "information-security-concepts", "cia-triad", "iso-27001-2022", "iso-27701-2019", "gdpr", "data-protection-principles" ], "domainSpecificKnowledge" : [ "Information security concepts", "CIA triad", "ISO 27001:2022", "ISO 27701:2019", "GDPR", "Data protection principles" ], "toolProficiency" : [ "Excel", "Word", "Teams", "SharePoint" ], "communicationSkills" : "Written communication; Verbal communication", "continuousLearning" : "Online learning platform", "problemSolvingSkills" : "Problem-solving", "qualificationsBasic" : "Basic understanding of information security concepts, Awareness of ISO 27001 or similar standards, Proficiency in Microsoft 365 tools, Familiarity with basic IT systems, Degree in Information Security, IT or related field, Internship, placement, or entry-level experience in IT or security", "qualificationsPreferred" : "Exposure to ISO 27001:2022 or ISO 27701:2019 environments, Knowledge of GDPR or data protection principles, ISO 27001 Foundation / Lead Implementer / Lead Auditor, ISO 27701 Foundation, CompTIA Security+, Certified Information Security Manager (CISM) or similar", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "At Quadient , we support businesses of all sizes in their digital transformation and growth journey, unlocking operational efficiency with reliable, secure, and sustainable automation processes. Our success in delivering innovation and business growth is inspired by the connections our diverse teams create every day, with our clients and each other. It’s these connections that make Quadient such an exceptional place to grow your career, develop your skills and make a real impact – help our future-focused business lead the way in powering secure and sustainable business connections through digital and physical channels. The role assists the Information Security Team to ensure that security controls are implemented, monitored, and maintained in accordance with regulatory, contractual, and organisational requirements. The successful applicant will also engage with other areas of the business to assist with their Information Security enquiries, as well as helping ensure that a strong security and privacy culture is maintained across the organisation. Your role in our future: * Assist with the administration and maintenance of Quadient’s ISO 27001:2022/ISO 27701:2019 certified ISMS/PIMS * Investigate and resolve security incidents * Maintain risk registers and ensure risks are identified, recorded, assessed, and treated appropriately * Maintain legal registers * Complete supplier security assessments * Support internal and external audits, including certification and surveillance audits. * Support management reviews with relevant metrics and insights * Assist with information security enquiries from other business areas and promote adherence to Quadient’s policies and best practices ## Qualifications Your profile: * Basic understanding of information security concepts (CIA triad, risk, controls) * Awareness of ISO 27001 or similar standards (academic or practical exposure) * Proactive, self-motivated with strong organisational skills * Analytical thinking and problem-solving * Good written and verbal communication skills * Strong attention to detail * Ability to follow processes and work under guidance * Proficiency in Microsoft 365 tools (Excel, Word, Teams, SharePoint) * Exposure to ISO 27001:2022 or ISO 27701:2019 environments * Knowledge of GDPR or data protection principles * Familiarity with basic IT systems, networks, or cloud services * Internship, placement, or entry-level experience in IT or security * Degree in Information Security, IT or related field (or equivalent experience) * ISO 27001 Foundation / Lead Implementer / Lead Auditor * ISO 27701 Foundation * CompTIA Security+ * Certified Information Security Manager (CISM) or similar ## Additional Information Rewards & Benefits * Flexible Work: Embrace a hybrid work model blending office and remote setup for a balanced lifestyle. * Endless Learning: Access global opportunities for growth through our 24/7 online learning platform. * Inclusive Community: Join our Empowered Communities and engage in our Philanthropy program. * Comprehensive Rewards: Enjoy competitive Total Rewards covering wellness, work/life balance, and more, including a generous referral scheme. * Caring for Wellbeing: Access our complimentary employee assistance program for mental health support. Smart Work at Quadient At Quadient, our Smart Work approach fosters connection, collaboration, and innovation while offering flexibility based on role requirements. Whether on-site, hybrid, or remote, our work environments are designed to support productivity and engagement. Hybrid employees balance remote and in-office work, on-site roles contribute daily to our vibrant workplace culture, and remote employees stay connected through virtual collaboration and in-person events. No matter where you work, you’ll be part of a dynamic, people-first community that drives success together. Be yourself at Quadient Our values define how we work as a team: Empowerment, Passion, Inspiration and Community. They inspire us to be EPIC. Together. What makes Quadient different is how different we are. We’re a team of individuals with one goal but many perspectives. When you connect with Quadient, you become part of a community that cares - in a culture that embraces differences and values every voice. We will consider any reasonable modifications to the interview process. If you require any assistance with the application process, please email us at career@quadient.com Quadient is an Equal Employment Opportunity Employer. *: We firmly believe in zero discrimination in employment on any basis, including race, color, religion, sex, national origin, age, disability, veteran or military status, genetic information, citizenship status, and any other characteristics protected by local, state, or federal law. People. Connected.", "summaryDescription" : "Information Security Administrator at Quadient. Skills: Information security, ISO 27001, ISO 27701, Risk management. Administer and maintain ISMS/PIMS. Investigate and resolve security incidents", "postedDate" : "2026-06-15T11:43:54.000", "createdAt" : "2026-06-16T00:00:34.414", "lastUpdated" : "2026-06-16T07:26:15.723", "ingestTimestamp" : "2026-06-16T00:00:34.414", "mongoId" : "6a305944f292fd229cf464d2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Risk assessment", "Supplier assessments", "Audit support", "Information security", "ISO 27001", "ISO 27701", "Risk management", "Organisational skills", "Analytical thinking", "Problem-solving", "Information security concepts", "CIA triad", "ISO 27001:2022", "ISO 27701:2019", "GDPR", "Data protection principles", "ISO 27001 Foundation", "ISO 27001 Lead Implementer", "ISO 27001 Lead Auditor", "ISO 27701 Foundation", "CompTIA Security+", "Certified Information Security Manager (CISM)", "Excel", "Word", "Teams", "SharePoint" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "_score" : 925.0103, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306986f292fd229cfc88fd", "title" : "Cybersecurity Network Security Specialist", "company" : "ARHS", "industry" : "Information Technology And Services", "salary" : { "min" : 100000.0, "max" : 150000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Network Security Specialist in Warsaw, Poland, adjusted for the Technology industry." }, "location" : "Warsaw, Masovian Voivodeship, Poland", "locations" : [ "Warsaw", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CCNP Security", "CCSP", "AZ-305" ], "timestamp" : "2026-06-16T11:22:30.636", "fingerprint" : "55cff00c6020b96fa74b303d42642034c59187fb924c4a1f4ea7192080a0c5cb", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/ARHS/744000132166709-cybersecurity-network-security-specialist", "externalId" : "744000132166709", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warsaw", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warsaw, Masovian Voivodeship, Poland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "TCP/IP, DNS, DHCP, NTP, HTTPS, SSL/TLS, PKI, Cisco, Palo Alto, Panorama, Azure, SASE, SSE, Zero Trust, WAF, Load Balancing, 802.1X, NAC", "professionalSkills" : [ "Network administration", "Network security", "Troubleshooting", "Configuration management", "Documentation", "Governance" ], "hardSkillsList" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation", "Wireless integration", "Wired integration" ], "softSkillsList" : [ "Analytical skills", "Sense of responsibility", "Clear communication", "Structured mindset", "Team-oriented mindset" ], "hardSkills" : [ { "name" : "Firewall management", "level" : "intermediate" }, { "name" : "Routing", "level" : "intermediate" }, { "name" : "Switching", "level" : "intermediate" }, { "name" : "VPN management", "level" : "intermediate" }, { "name" : "Packet analysis", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Wireless integration", "level" : "intermediate" }, { "name" : "Wired integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical skills" }, { "name" : "Sense of responsibility" }, { "name" : "Clear communication" }, { "name" : "Structured mindset" }, { "name" : "Team-oriented mindset" } ], "majorSkills" : "Network security, Enterprise network infrastructure, Cloud networking", "majorSkillsList" : [ "Network security", "Enterprise network infrastructure", "Cloud networking" ], "coreResponsibilities" : "Administer network security solutions, Monitor network security solutions, Troubleshoot network security solutions, Manage firewalls, Manage routing, Manage switching, Manage secure access technologies, Ensure stable operation of enterprise network infrastructure, Support hybrid connectivity, Provide 2nd line support, Perform advanced troubleshooting, Investigate connectivity issues, Investigate performance issues, Investigate security issues, Resolve connectivity issues, Resolve performance issues, Resolve security issues, Implement network configurations, Maintain network configurations, Manage VPNs, Manage secure remote access, Manage network segmentation, Support wireless network integrations, Support wired network integrations, Identify gaps in network security controls, Propose improvements to network security, Support Zero Trust initiatives, Support modern security architecture initiatives, Contribute to migration efforts, Create technical documentation, Maintain technical documentation, Create operating procedures, Maintain operating procedures, Ensure adherence to network security policies, Ensure adherence to network security standards", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Network security; Cloud networking; Zero Trust principles; SASE; SSE; Modern security architecture", "domainList" : [ "network-security", "cloud-networking", "zero-trust-principles", "sase", "sse", "modern-security-architecture" ], "domainSpecificKnowledge" : [ "Network security", "Cloud networking", "Zero Trust principles", "SASE", "SSE", "Modern security architecture" ], "toolProficiency" : [ "Panorama" ], "communicationSkills" : "Technical documentation; Operating procedures", "documentationSkills" : "Technical documentation; Operating procedures", "problemSolvingSkills" : "Troubleshooting; Analytical skills", "specialRequirements" : "Occasional travel within Europe, Driving license Category B", "qualificationsBasic" : "Understanding of TCP/IP, Understanding of routing, Understanding of network security policies, Knowledge of DNS, Knowledge of DHCP, Knowledge of NTP, Knowledge of core network services, Understanding of wired access technologies, Understanding of wireless access technologies, Knowledge of HTTPS, Knowledge of SSL/TLS, Knowledge of PKI, Knowledge of certificate-based authentication, Experience with traffic filtering, Hands-on experience with enterprise network environments, Experience with Cisco, Experience with Palo Alto, Experience with wireless solutions, Familiarity with endpoint network configurations, Azure networking, Network security controls, CCNP Security or equivalent", "qualificationsPreferred" : "CCSP or Azure AZ-305", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Arηs Group, Part of Accenture, specializes in the management of complex public sector IT projects, including systems integration, informatics and analytics, solution implementation and program management. Our team helps lead clients through digital and information systems design, bringing expertise in a variety of areas ranging from software development, data science and security management to machine learning, cloud, and mobile development. Arηs Group was acquired by Accenture in July 2024. Role Overview You will manage and secure enterprise network infrastructure across on-prem and cloud environments, ensuring reliable connectivity, strong security posture, and consistent network operations. The role combines hands-on administration, troubleshooting, and continuous improvement of network security capabilities. Responsibilities Network Security & Operations * Administer, monitor, and troubleshoot network security solutions * Manage firewalls, routing, switching, and secure access technologies * Ensure secure and stable operation of enterprise network infrastructure * Support hybrid connectivity (on-prem and cloud environments) Support & Troubleshooting * Provide 2nd line support for network and security-related incidents * Perform advanced troubleshooting (network flows, packet analysis, firewall dataplane) * Investigate and resolve connectivity, performance, and security issues Configuration & Implementation * Implement and maintain network configurations across environments * Manage VPNs, secure remote access, and network segmentation * Support wireless and wired network integrations (e.g. 802.1X, NAC) Security & Continuous Improvement * Identify gaps in network security controls and propose improvements * Support Zero Trust and modern security architecture initiatives * Contribute to migration efforts (e.g. SASE/SSE, cloud networking) Documentation & Governance * Create and maintain technical documentation and operating procedures * Ensure adherence to network security policies and standards ## Qualifications Core Networking * Strong understanding of TCP/IP, routing, and network security policies * Knowledge of DNS, DHCP, NTP and core network services * Understanding of wired and wireless access technologies Security & Encryption * Knowledge of HTTPS, SSL/TLS, PKI, and certificate-based authentication * Experience with traffic filtering (stateful/stateless) Infrastructure & Tools * Hands-on experience with enterprise network environments * Experience with Cisco (routing/switching), Palo Alto (firewalls, Panorama), wireless solutions * Familiarity with endpoint network configurations (Windows, Linux, iOS) Cloud & Modern Networking * Azure networking (VNets, segmentation, private endpoints, hybrid connectivity) * Network security controls (NSGs, routing, isolation) * Experience with SASE/SSE and Zero Trust principles is an advantage * Exposure to WAF and Load Balancing solutions Certifications * CCNP Security or equivalent (required) * CCSP or Azure AZ-305 (nice to have) Key Competencies * Strong analytical and troubleshooting skills * Attention to detail and sense of responsibility * Ability to work independently in complex environments * Clear communication with technical and non-technical stakeholders * Proactive, structured, and team-oriented mindset ## Additional Information * This role requires occasional travel within Europe (up to ~10 times/year) * Driving license (Category B) required", "summaryDescription" : "Cybersecurity Network Security Specialist at ARHS. Skills: Network security, Enterprise network infrastructure, Cloud networking. Administer network security solutions. Monitor network security solutions", "postedDate" : "2026-06-15T10:33:17.000", "createdAt" : "2026-06-16T00:19:01.793", "lastUpdated" : "2026-06-16T11:22:30.636", "ingestTimestamp" : "2026-06-16T00:19:01.793", "mongoId" : "6a306986f292fd229cfc88fd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation", "Wireless integration", "Wired integration", "Analytical skills", "Sense of responsibility", "Clear communication", "Structured mindset", "Team-oriented mindset", "Network security", "Enterprise network infrastructure", "Cloud networking", "Network administration", "Troubleshooting", "Configuration management", "Documentation", "Governance", "Program management", "Zero Trust principles", "SASE", "SSE", "Modern security architecture", "CCNP Security", "CCSP", "AZ-305", "Panorama" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 924.7094, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6b2d74d8ee00a0910932", "title" : "Information Security Officer", "company" : "Moonfare", "location" : "Berlin, Germany", "locations" : [ "Berlin", "Germany" ], "certifications" : [ "CISM", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "GSLC", "GISP" ], "timestamp" : "2026-06-15T06:56:57.349", "fingerprint" : "558b46adf9ac516ab72e0922992095dc5cef62ec25cd21960077daf51d876952", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.moonfare.com/open-position/?gh_jid=7693276003", "externalId" : "7693276003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid" } ], "locationText" : "Berlin, Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Information Security", "professionalSkills" : [ "Finance or FinTech industry in the EU, specifically in the DACH region." ], "hardSkillsList" : [ "BaFin requirements", "DORA", "NIS2", "ISO 27001", "CISM", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "GSLC", "GISP" ], "softSkillsList" : [ "Client-Centric Focus, Commitment to Excellence, Win together, Growth and Merit" ], "hardSkills" : [ { "name" : "BaFin requirements", "level" : "intermediate" }, { "name" : "DORA", "level" : "intermediate" }, { "name" : "NIS2", "level" : "intermediate" }, { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "CISM", "level" : "intermediate" }, { "name" : "CISA", "level" : "intermediate" }, { "name" : "ISO 27001 Lead Auditor", "level" : "intermediate" }, { "name" : "ISO 27001 Implementer", "level" : "intermediate" }, { "name" : "GSLC", "level" : "intermediate" }, { "name" : "GISP", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Client-Centric Focus, Commitment to Excellence, Win together, Growth and Merit" } ], "majorSkills" : "Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001", "majorSkillsList" : [ "Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001" ], "coreResponsibilities" : "Lead all information security and relevant Governance, Risk, and Compliance (GRC) initiatives. Ensure information security posture is robust, compliant with German and EU regulations, and aligned with business goals. Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001. Conduct risk assessments and monitor risk mitigation activities. Oversee internal and external security audits. Promote continuous employee awareness of Information Security and Data Protection topics.", "teamCollaboration" : "Work closely with various departments to embed security into the fabric of our organization.", "projectManagementSkills" : [ "Lead the company's efforts to achieve and maintain compliance" ], "toolProficiency" : [ "Moonfare careers website" ], "communicationSkills" : "English; German", "documentationSkills" : "Information Security Management System (ISMS)", "continuousLearning" : "We support your development with an individual growth budget of €1,500 or 2% of your base salary (whichever is higher).", "problemSolvingSkills" : "risk mitigation", "specialRequirements" : "Only accept applications from those eligible to live and work in Berlin. Hybrid role with office attendance required 4 days/week. Do not accept applications sent by email.", "outcomesObjectives" : "Empowered to bring ideas, make decisions, and see your work directly contribute to Moonfare's success.", "qualificationsBasic" : "Proven experience in a similar Information Security role. Deep understanding and practical experience with German security regulations and BaFin requirements. Expert knowledge of information security frameworks and regulations such as ISO 27001, DORA, and NIS2. Experience in developing, maintaining, and implementing an ISMS, leading to successful certification. Excellent communication skills with full professional proficiency in English.", "qualificationsPreferred" : "A background in Software Engineering or Computer Science is beneficial. Working proficiency in German is desirable. Industry-recognized certifications such as CISM, CISA, ISO 27001 Lead Auditor/Implementer, or SANS/GIAC certifications (e.g. GSLC, GISP) are highly desirable.", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Join the team rewriting the rules in private markets. Moonfare delivers what few others can: the highly sought-after funds and hidden-gem investments that go beyond what most private banks offer. Every opportunity is subjected to a ruthless vetting process; the bar is unforgivingly high. The result? Institutional-quality portfolios for investors who demand more. Our team combines finance veterans with talent from tech, consulting, law and industries you’d never expect. Headquartered in Berlin, we operate from eight offices across Europe, the US and Asia. If you're ready to build what's next in private markets, let's talk. Information Security Officer (m/f/d) As an Information Security Officer, you will be a central figure in our journey to become a BaFin-regulated entity. As part of the 2nd line of defence, you will lead all information security and relevant Governance, Risk, and Compliance (GRC) initiatives. Your primary objective will be to ensure our information security posture is robust, compliant with German and EU regulations, and aligned with our business goals. In this role you will work closely with various departments to embed security into the fabric of our organization. Your Mission: Lead the company's efforts to achieve and maintain compliance with key information security regulations, including BaFin requirements, DORA, and NIS2. Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001 and other relevant standards. Conduct comprehensive risk assessments and work with control functions to monitor and report on risk mitigation activities. Provide expert guidance to internal teams on information security policies, procedures, and best practices. Oversee internal and external security audits to ensure we meet our compliance goals. Act as the primary point of contact for all information security matters within the licensed entity. Promote continuous employee awareness of Information Security and Data Protection topics. The next Moonfarian: Proven experience in a similar Information Security role, preferably within the finance or FinTech industry in the EU, with specific experience in the DACH region. Deep understanding and practical experience with German security regulations and BaFin requirements. Expert knowledge of information security frameworks and regulations such as ISO 27001, DORA, and NIS2. Experience in developing, maintaining, and implementing an ISMS, leading to successful certification (e.g., ISO 27001). A background in Software Engineering or Computer Science is beneficial. Industry-recognized certifications such as CISM, CISA, ISO 27001 Lead Auditor/Implementer, or SANS/GIAC certifications (e. g. GSLC, GISP) are highly desirable. Excellent communication skills with full professional proficiency in English, working proficiency in German is desirable. If you feel you do not meet all of the requirements, we still encourage you to apply! Please Note: We can only accept applications from those eligible to live and work in Berlin. This is a hybrid role with office attendance required 4 days/week. Please note that we do not accept applications sent by email. You should submit your application directly through our careers website. Invest in yourself: Ownership and Impact: You are empowered to bring ideas, make decisions, and see your work directly contribute to Moonfare's success. Transparent Environment: We believe in open communication. You will receive regular updates on company strategy, performance against our KPIs, and key business decisions. Personal Growth: We support your development with an individual growth budget of €1,500 or 2% of your base salary (whichever is higher). Invest in Your Future: We support your long-term financial goals with a company pension scheme, providing a 20% employer contribution. Relax and Recharge: You start with 25 vacation days and you’ll receive one additional day for each year of tenure, up to a maximum of 30 days. Daily Lunch: Enjoy a free lunch every day that you are in the Berlin office, with a weekly changing menu that includes salads, curries, pastas, and a variety of vegan and vegetarian options. Subsidised Public Transport: We support your commute with a monthly subsidy for the Deutschland job ticket, making your travel easier and more affordable. Fitness and Wellbeing: Stay active with a subsidised Urban Sports Club membership, giving you flexible access to a wide variety of sports and wellness activities across Germany. A Culture of Excellence: Join a team of ambitious, smart, and committed professionals who are passionate about revolutionising private market investing. Our Values: Client-Centric Focus: Our clients come first, Moonfare comes second, and we prioritise ourselves third. Putting clients first means creating value for them is essential. Placing Moonfare second signifies that our individual professional future at Moonfare depends on the company's commercial success. Prioritising ourselves third reflects our humility in putting clients and Moonfare before personal interests. Commitment to Excellence: We pursue excellence and honor our promises. We hold ourselves to the highest standards, taking responsibility for our failures, and celebrating our successes. We commit to deadlines and stick to them and we learn from our mistakes. Win together: We are here to win and to celebrate our collective achievements. We are mission-focused and think and act like owners. We exemplify the attitude we expect and each of us commits to do what it takes to succeed. Growth and Merit: We foster personal growth but each of us earns our place as a Moonfarian through merit. We hire, retain, and develop exceptional people and invest in empowering them to excel. We must all earn our place at the table every day. We understand the important role that diversity plays in our success. Different backgrounds, experiences and ideas push us further and raise the bar. We’re committed to developing an inclusive and safe culture where everyone—regardless of colour, race, religion, sex, origin, sexuality, disability, marital status, citizenship or gender identity—knows that they are an integral part of the team and can bring their full potential to their work.", "summaryDescription" : "Information Security Officer at Moonfare. Skills: Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001. Lead all information security and relevant Governance, Risk, and Compliance (GRC) initiatives. Ensure information security posture is robust, compliant with German and EU regulations, and aligned with business goals. Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001. Conduct", "postedDate" : "2026-06-14T19:15:48.901", "createdAt" : "2026-06-14T19:15:48.901", "lastUpdated" : "2026-06-15T06:56:57.349", "ingestTimestamp" : "2026-06-14T19:15:48.901", "mongoId" : "6a2c6b2d74d8ee00a0910932", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "BaFin requirements", "DORA", "NIS2", "ISO 27001", "CISM", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "GSLC", "GISP", "Client-Centric Focus, Commitment to Excellence, Win together, Growth and Merit", "Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001", "Finance or FinTech industry in the EU, specifically in the DACH region.", "Lead the company's efforts to achieve and maintain compliance", "Moonfare careers website" ], "skillCount" : 15, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 915.2207, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "69f8950e4c40e2acd1fa4a70", "title" : "Cybersecurity Analyst", "company" : "Texas Workforce Commission", "industry" : "Government", "salary" : { "max" : 6982.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "826970", "locations" : [ "826970", "
Austin:1117 Trinity St (320TX-4002)
1117 Trinity St
Austin, 78701-1919

" ], "timestamp" : "2026-06-15T09:42:30.940", "fingerprint" : "79d57d066c1e9f1688bb80c121b3a094589b0455ca67250a444d6c53761b762b", "source" : "taleo", "language" : "en", "applyUrl" : "https://aa270.taleo.net/careersection/ex/jobdetail.ftl?job=34795", "externalId" : "34795", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cybersecurity analysis, Information security analysis, Digital forensics, Vulnerability scanning, Forensic analysis, Data recovery, System monitoring", "professionalSkills" : [ "Risk assessment", "Independent judgment" ], "hardSkillsList" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis" ], "softSkillsList" : [ "Critical thinking" ], "hardSkills" : [ { "name" : "Account permissions review", "level" : "intermediate" }, { "name" : "Security violation review", "level" : "intermediate" }, { "name" : "Incident detection", "level" : "intermediate" }, { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Incident prevention", "level" : "intermediate" }, { "name" : "Network vulnerability scans", "level" : "intermediate" }, { "name" : "Application vulnerability scans", "level" : "intermediate" }, { "name" : "System monitoring", "level" : "intermediate" }, { "name" : "Cybersecurity alert analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Critical thinking" } ], "majorSkills" : "Cybersecurity analysis, Information security, Digital forensics", "majorSkillsList" : [ "Cybersecurity analysis", "Information security", "Digital forensics" ], "coreResponsibilities" : "Perform technical risk assessments, Review account permissions, Review security violations, Conduct cybersecurity incident detection, Conduct cybersecurity incident analysis, Conduct cybersecurity incident prevention, Perform vulnerability scans, Identify network weaknesses, Identify application weaknesses, Execute forensic analysis, Recover data using tools, Monitor systems, Monitor procedures, Protect data systems, Analyze cybersecurity alerts", "domainKnowledge" : "Information security; Cybersecurity", "domainList" : [ "information-security", "cybersecurity" ], "domainSpecificKnowledge" : [ "Information security", "Cybersecurity" ], "toolProficiency" : [ "Assessment tools" ], "continuousLearning" : "Training opportunities; Development opportunities", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Must be Texas resident, Willing to relocate to Texas", "qualificationsBasic" : "Four years cybersecurity analysis experience, Four years information security analysis experience, Four years digital forensics experience, Relevant academic credits may apply, Acceptance into TWC Internship, Acceptance into TWC Apprenticeship", "qualificationsPreferred" : "High interest in cybersecurity", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "WHO WE ARE: Texas Workforce Commission connects people with careers across the state. While we are based in Austin on the north lawn of the Texas State Capitol, we have offices statewide. We're a Family Friendly Certified Workplace with great work-life balance, competitive salaries, extensive opportunities for training and development, and fantastic benefits. This position is located at 1117 Trinity Street, Austin, Texas in the Chief Info Security Officer department. TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. You must be a Texas resident to work for the Texas Workforce Commission or willing to relocate to Texas. WHO YOU ARE: A person with technical experience and experience or a high interest in cybersecurity WHAT YOU WILL DO: The Cybersecurity Analyst I performs moderately complex (journey-level) information security and cybersecurity analysis work. Works under general supervision, with moderate latitude for the use of initiative and independent judgment. YOU WILL BE TRUSTED TO: -Perform technical risk assessments and reviews of account permissions and security violations. -Conduct cybersecurity incident detection, analysis, and prevention. -Perform vulnerability scans of networks and applications to identify weaknesses. -Execute forensic analysis and recovery of data using assessment tools. -Monitor systems and procedures to protect data systems from unauthorized access. -Analyze cybersecurity alerts from tools, network devices, and information systems. - Perform other duties as assigned. YOU QUALIFY WITH: -Four years of full-time experience in cybersecurity analysis, information security analysis, or digital forensics. -Relevant academic credits may be applied toward experience qualifications for this position. -Acceptance into a TWC Internship or TWC Apprenticeship will satisfy the minimum qualifications. YOU ARE A GREAT FIT WITH: You are ready to learn and use critical thinking skills to succeed. YOU GAIN: - A Family Friendly Certified Workplace. - Competitive salary: $6,982.50/month - Defined Retirement Benefit Plan - Optional 401(k) and 457 accounts - Medical Insurance - Paid time off, including time for vacation, sick and family care leave - Additional benefits for active employees can be found at https://www.ers.texas.gov/Active-Employees/Health-Benefits. VETERANS: Use your military skills to qualify for this position or other jobs! Go to www.texasskillstowork.com to translate your military work experience and training courses into civilian job terms, qualifications, and skill sets. Also, you can compare this position to military occupations (MOS) at the Texas State Auditor's Office by pasting this link into your browser: https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf HOW TO APPLY: To be considered, please complete a State of Texas Application for Employment and apply online at www.workintexas.com or on Taleo ( Job Search ). TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. A position utilizing this classification will be designated as security sensitive according to the Texas Labor Code, Section 301.042. United States-Texas-Austin", "summaryDescription" : "Cybersecurity Analyst at Texas Workforce Commission. Skills: Cybersecurity analysis, Information security, Digital forensics. Perform technical risk assessments. Review account permissions", "createdAt" : "2026-06-14T07:31:02.477", "lastUpdated" : "2026-06-15T09:42:30.940", "ingestTimestamp" : "2026-06-14T07:31:02.477", "mongoId" : "69f8950e4c40e2acd1fa4a70", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 83784, "hasSalary" : false, "allSkills" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis", "Critical thinking", "Cybersecurity analysis", "Information security", "Digital forensics", "Risk assessment", "Independent judgment", "Cybersecurity", "Assessment tools" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 898.8358, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca37374d8ee00a09abccb", "title" : "Information Security Systems Analyst", "company" : "Arrowhead Pharmaceuticals", "industry" : "Pharma", "salary" : { "min" : 85000.0, "max" : 100000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Madison, Wisconsin, United States", "locations" : [ "Madison", "Wisconsin", "United States" ], "certifications" : [ "SC-400" ], "timestamp" : "2026-06-15T21:16:53.144", "fingerprint" : "45a32f0296fdffdd4e9f8457d8f3846786e9bbc385f174ca30f6806f1f088423", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://arrowheadpharma.com/careers/?gh_jid=5163400007", "externalId" : "5163400007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Madison", "state" : "Wisconsin", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.0746900,-89.3841663" } ], "locationText" : "Madison, Wisconsin, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Microsoft Purview, Data governance, Data loss prevention, Information protection, Microsoft 365, Intune, Exchange, SharePoint, OneDrive, Teams, Endpoints, SIEM tools, EDR platforms", "professionalSkills" : [ "Analytical skills", "Problem-solving skills", "Subject matter expert" ], "hardSkillsList" : [ "Data classification", "DLP policy tuning", "EDiscovery", "Insider Risk Management", "Audit log interpretation", "Compliance reporting", "Platform administration", "Health monitoring", "Change management" ], "hardSkills" : [ { "name" : "Data classification", "level" : "intermediate" }, { "name" : "DLP policy tuning", "level" : "intermediate" }, { "name" : "EDiscovery", "level" : "intermediate" }, { "name" : "Insider Risk Management", "level" : "intermediate" }, { "name" : "Audit log interpretation", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Platform administration", "level" : "intermediate" }, { "name" : "Health monitoring", "level" : "intermediate" }, { "name" : "Change management", "level" : "intermediate" } ], "majorSkills" : "Microsoft Purview, Data Loss Prevention, Information Protection, Data Classification", "majorSkillsList" : [ "Microsoft Purview", "Data Loss Prevention", "Information Protection", "Data Classification" ], "coreResponsibilities" : "Administer Microsoft Purview platform, Serve as subject matter expert for data governance, Serve as subject matter expert for DLP, Serve as subject matter expert for information protection, Administer sensitivity labels, Maintain label policies, Configure auto-labeling, Develop classification taxonomies, Refine auto-classification rules, Build DLP policies, Maintain DLP policies, Tune DLP policies, Investigate DLP policy matches, Investigate DLP alerts, Refine DLP rules, Document DLP incidents, Escalate DLP violations, Support legal hold requests, Execute eDiscovery collections, Export content searches, Administer Insider Risk Management policies, Review insider risk alerts, Coordinate insider risk cases, Generate Purview audit logs, Generate compliance reports, Generate dashboard analytics, Report on DLP incidents, Report on label adoption rates, Report on policy effectiveness, Report on compliance posture, Identify trends, Recommend policy adjustments, Monitor Purview platform health, Monitor Purview platform performance, Apply configuration changes, Apply updates, Manage connector integrations, Maintain documentation, Contribute to knowledge base, Triage security alerts, Escalate security alerts", "teamCollaboration" : "Work with business stakeholders; Work with Legal; Work with HR; Work with Security leadership; Coordinate with functional teams", "domainKnowledge" : "Pharmaceutical data types; Regulatory submissions; Patient data; RNAi technologies", "domainList" : [ "pharmaceutical-data-types", "regulatory-submissions", "patient-data", "rnai-technologies" ], "domainSpecificKnowledge" : [ "Pharmaceutical data types", "Regulatory submissions", "Patient data", "RNAi technologies" ], "toolProficiency" : [ "Microsoft Purview", "Microsoft 365", "Intune" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Maintain documentation; Runbooks; Diagrams; Standards; Exceptions", "problemSolvingSkills" : "Investigate alerts; Interpret audit logs; Distinguish signal from noise", "specialRequirements" : "Valid authorization to work", "qualificationsBasic" : "Bachelor's degree in Information Security, IT, or Computer Science, 3+ years in Information Security, IT compliance, or data governance, Hands-on experience administering Microsoft Purview or M365 Compliance Center, Experience with sensitivity labels, DLP, retention policies, eDiscovery, or Insider Risk Management, Experience working within a regulated industry", "qualificationsPreferred" : "Microsoft certifications relevant to security and compliance, Experience with Microsoft Defender for Cloud Apps, Prior experience in pharmaceutical, biotech, or life sciences, Experience supporting eDiscovery or legal hold workflows, Exposure to SIEM tools, Exposure to EDR platforms, Exposure to identity and access management systems", "rawDescription" : "Arrowhead Pharmaceuticals, Inc. (Nasdaq ARWR) is a commercial stage biopharmaceutical company that develops medicines that treat intractable diseases by silencing the genes that cause them. Using a broad portfolio of RNA chemistries and efficient modes of delivery, Arrowhead therapies trigger the RNA interference mechanism to induce rapid, deep, and durable knockdown of target genes. RNA interference, or RNAi, is a mechanism present in living cells that inhibits the expression of a specific gene, thereby affecting the production of a specific protein. Arrowhead’s RNAi-based therapeutics leverage this natural pathway of gene silencing. Arrowhead is focused on developing innovative drugs for diseases with a genetic basis, typically characterized by the overproduction of one or more proteins that are involved with disease. The depth and versatility of our RNAi technologies enables us to potentially address conditions in virtually any therapeutic area and pursue disease targets that are not otherwise addressable by small molecules and biologics. Arrowhead is leading the field in bringing the promise of RNAi to address diseases outside of the liver, and our clinical pipeline includes disease targets in the liver and lung with a promising pipeline of preclinical candidates. Arrowhead’s corporate headquarters is in Pasadena, CA with research and development teams in Madison, WI & San Diego, CA, and a state of the art manufacturing facility in Verona, WI. Our employees are nimble, science-driven innovators who are collaborating to bring new therapies to patients in need. The Position The Information Security Systems Analyst is responsible for the day-to-day administration, operation, and continuous improvement of the organization's Microsoft Purview platform, serving as the primary subject matter expert for data governance, data loss prevention (DLP), and information protection. This role operates at the intersection of information security, data governance, and regulatory compliance, ensuring that sensitive data - including intellectual property, clinical trial data, and personally identifiable information - is properly classified, protected, and governed in accordance with applicable regulations and internal policies. In addition to Purview-focused responsibilities, this analyst contributes to broader information security operations including troubleshooting endpoints, working in Microsoft 365, and Intune. Responsibilities The analyst will serve as the hands-on operational owner of Microsoft Purview, managing the platform on a daily basis across its core functional areas: Information Protection & Data Classification - Administer and maintain Microsoft Purview sensitivity labels, label policies, and auto-labeling configurations. Develop and refine classification taxonomies appropriate to pharmaceutical data types, including research data, regulatory submissions, and patient data. Review and tune auto-classification rules to minimize false positives and ensure accurate labeling across Microsoft 365 and connected data sources. Data Loss Prevention - Build, maintain, and continuously tune DLP policies across Exchange, SharePoint, OneDrive, Teams, and endpoints. Investigate DLP policy matches and alerts, differentiate true policy violations from false positives, and work with business stakeholders to refine rules without disrupting legitimate business workflows. Document DLP incidents and escalate confirmed violations per the incident response process. eDiscovery & Content Search - Support legal hold requests and eDiscovery collections. Work with Legal and HR to scope, execute, and export content searches accurately and in accordance with chain-of-custody requirements. Insider Risk Management - Administer Purview Insider Risk Management policies, review alerts, and coordinate with HR, Legal, and Security leadership on confirmed or suspected insider risk cases. Maintain strict confidentiality in handling all insider risk data. Audit & Reporting - Generate and interpret Purview audit logs, compliance reports, and dashboard analytics. Provide regular reporting to management on DLP incidents, label adoption rates, policy effectiveness, and compliance posture. Identify trends and recommend adjustments to policies and configurations. Platform Administration & Health Monitoring - Monitor the health and performance of the Purview platform, apply configuration changes and updates in alignment with change management processes, and stay current on Microsoft feature releases relevant to Purview. Manage connector integrations with third-party data sources as required. Maintain clear documentation (runbooks, diagrams, standards, exceptions) and contribute to a knowledge base. Triage security alerts and escalate as necessary. Requirements Bachelor's degree in Information Security, Information Technology, Computer Science, or a related field, or equivalent practical experience 3+ years of experience in Information Security, IT compliance, or data governance role Demonstrated hands-on experience administering Microsoft Purview or its predecessor Microsoft 365 Compliance Center, including at least two of the following areas: sensitivity labels, DLP, retention policies, eDiscovery, or Insider Risk Management Experience working within or supporting a regulated industry environment Strong analytical and problem-solving skills with the ability to investigate alerts, interpret audit logs, and distinguish signal from noise Effective written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders Preferred Microsoft certifications relevant to security and compliance, such as SC-401 Experience with Microsoft Defender for Cloud Apps (MCAS) and its integration with Purview Prior experience in the pharmaceutical, biotech, or life sciences sector Experience supporting eDiscovery or legal hold workflows in collaboration with Legal teams Exposure to SIEM tools, endpoint detection and response (EDR) platforms, or identity and access management systems Comfortable working across functional teams including Legal, Compliance, HR, and IT, and possesses the judgment to handle sensitive data and insider risk information with appropriate discretion. Wisconsin pay range $85,000—$100,000 USD Arrowhead provides competitive salaries and an excellent benefit package. Candidates must have current, valid authorization to work in the country where this role is located. California Applicant Privacy Policy", "summaryDescription" : "Information Security Systems Analyst at Arrowhead Pharmaceuticals. Skills: Microsoft Purview, Data Loss Prevention, Information Protection, Data Classification. Administer Microsoft Purview platform. Serve as subject matter expert for data governance", "postedDate" : "2026-06-14T19:24:05.102", "createdAt" : "2026-06-14T19:24:05.102", "lastUpdated" : "2026-06-15T21:16:53.144", "ingestTimestamp" : "2026-06-14T19:24:05.102", "mongoId" : "6a2ca37374d8ee00a09abccb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 100000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Data classification", "DLP policy tuning", "EDiscovery", "Insider Risk Management", "Audit log interpretation", "Compliance reporting", "Platform administration", "Health monitoring", "Change management", "Microsoft Purview", "Data Loss Prevention", "Information Protection", "Data Classification", "Analytical skills", "Problem-solving skills", "Subject matter expert", "Pharmaceutical data types", "Regulatory submissions", "Patient data", "RNAi technologies", "SC-400", "Microsoft 365", "Intune" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 896.4769, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Biotech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2abe2074d8ee00a06ecab9", "title" : "Cybersecurity – Information System Security Officer (ISSO)", "company" : "Boeing", "salary" : { "min" : 113050.0, "max" : 152950.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Ridley Park, PA", "locations" : [ "USA - Ridley Park, PA", "United States of America" ], "certifications" : [ "IAM Level 1 DoD 8140.03 compliant certification", "Security+ CE", "CAP", "CISSP", "CASP", "CISM", "GSLC" ], "timestamp" : "2026-06-14T23:23:29.448", "fingerprint" : "77dadf646bf5e5086279704fec6ecb64603c4397f40af0cd98e333b949f616cc", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Ridley-Park-PA/Cybersecurity---Information-System-Security-Officer--ISSO-_JR2026496226", "externalId" : "JR2026496226", "locationPoint" : "39.88122,-75.3238", "structuredLocations" : [ { "city" : "Ridley Park", "state" : "Pennsylvania", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.8812236,-75.3237993" } ], "locationText" : "Ridley Park, Pennsylvania, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cybersecurity, Information Assurance, Risk Management Framework, NIST SP 800", "professionalSkills" : [ "Information System Security", "Security Analysis", "Risk Assessment", "Incident Response", "Configuration Management", "Compliance" ], "hardSkillsList" : [ "Security policy implementation", "System authorization", "Continuous monitoring", "Hardware/software inventory" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security policy implementation", "level" : "intermediate" }, { "name" : "System authorization", "level" : "intermediate" }, { "name" : "Continuous monitoring", "level" : "intermediate" }, { "name" : "Hardware/software inventory", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Information System Security, Risk Management Framework, Cybersecurity", "majorSkillsList" : [ "Information System Security", "Risk Management Framework", "Cybersecurity" ], "coreResponsibilities" : "Perform security analysis, Assess compliance with standards, Lead Assessment and Authorization (A&A) processes, Implement RMF for information systems, Facilitate MOUs, Facilitate ISAs, Facilitate RALs, Support Continuous Monitoring (CONMON), Oversee configuration management, Ensure security posture integrity, Lead staff with assessments, Document state of compliance, Conduct risk assessments, Conduct investigations, Execute risk mitigations, Oversee incident response, Conduct periodic inventory assessments, Serve as spokesperson, Advise management on technical research, Interface with government customers, Interface with suppliers, Implement protective mechanisms, Ensure understanding of cybersecurity requirements, Oversee development of program information security, Deploy program information security, Meet program and enterprise requirements, Manage security compliance monitoring, Perform security compliance monitoring, Oversee security assessments, Participate in security audits, Prepare technical reports, Review technical reports, Present technical reports, Prepare technical briefings, Review technical briefings, Present technical briefings, Identify root causes, Prioritize threats, Recommend corrective action, Implement corrective action, Explore industry knowledge, Explore industry methods", "teamCollaboration" : "Interface with government customers; Interface with suppliers; Interface with company personnel", "projectManagementSkills" : [ "Risk Management Framework", "Assessment and Authorization" ], "domainKnowledge" : "Classified computing domains; Information System Security; Risk Management Framework; DAAG; CNSSI 1253; ICD-503; JSIG; NIST SP 800; DFARs compliance", "domainList" : [ "classified-computing-domains", "information-system-security", "risk-management-framework", "daag", "cnssi-1253", "icd-503", "jsig", "nist-sp-800", "dfars-compliance" ], "domainSpecificKnowledge" : [ "Classified computing domains", "Information System Security", "Risk Management Framework", "DAAG", "CNSSI 1253", "ICD-503", "JSIG", "NIST SP 800", "DFARs compliance" ], "toolProficiency" : [ "NESSUS", "ACAS", "DISA STIGs", "SCAP", "HBSS" ], "communicationSkills" : "Technical reports; Technical briefings", "documentationSkills" : "Memorandums of Understanding; Interconnection Security Agreements; Risk Acknowledgement Letters; Technical reports", "problemSolvingSkills" : "Root cause analysis; Risk assessment; Threat prioritization", "specialRequirements" : "Active U.S. Secret Security Clearance, U.S. Citizenship Required", "qualificationsBasic" : "IAM Level 1 DoD 8140.03 compliant certification, 3+ years cybersecurity, IT, or related experience, 3+ years RMF, cybersecurity policies, RMF implementation experience", "qualificationsPreferred" : "3+ years ISSO/ISSM experience, 3+ years experience with security tools for RMF, 3+ years assessing and documenting test data, 3+ years DFARs compliance experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Cybersecurity – Information System Security Officer (ISSO) **Company:** The Boeing Company Boeing Classified Cybersecurity is currently seeking a highly motivated **Cybersecurity – Information System Security Officer (ISSO)** to join their team in **Ridley Park, PA**. The selected candidate will rely on Cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSO is responsible for maintaining and implementing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information. **Position Responsibilities:** * Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards * Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems * Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON) * Oversee configuration management of assigned systems; auditing systems to ensure security posture integrity * Lead staff with assessments and test/analysis data to document state of compliance with security requirements * Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities * Conduct periodic hardware/software inventory assessments * Serve as organization spokesperson on advanced projects and programs * Act as advisor to management and customers on advanced technical research studies * Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements **Additional Responsibilities:** * Oversee the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures * Manage and perform security compliance continuous monitoring * Oversee and participate in security assessments and audits * Prepare, review, and present technical reports and briefings * Identify root causes, prioritizes threats and recommends and/or implements corrective action * Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices **Basic Qualifications (Required Skills/Experience):** * IAM Level 1 DoD 8140.03 (previously 8570.01) compliant certification (i.e. , Security+ CE, CAP, CISSP, CASP, CISM, GSLC) * 3+ years of combined experience and/or education in cybersecurity, IT, or a related field * 3+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series) **Preferred Qualifications (Desired Skills/Experience):** * 3+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs * 3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS * 3+ years of experience assessing and documenting test or analysis data to show cyber security compliance * 3+ years of experience with DFARs compliance **Conflict of Interest:** Successful candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $113,050 – $152,950 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This is not an Export Control position. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Cybersecurity – Information System Security Officer (ISSO) at Boeing. Skills: Information System Security, Risk Management Framework, Cybersecurity. Perform security analysis. Assess compliance with standards", "postedDate" : "2026-06-11T04:12:40.068", "createdAt" : "2026-06-12T04:12:39.973", "lastUpdated" : "2026-06-14T23:23:29.448", "ingestTimestamp" : "2026-06-12T04:12:39.973", "mongoId" : "6a2abe2074d8ee00a06ecab9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Ridley-Park-PA/Cybersecurity---Information-System-Security-Officer--ISSO-_JR2026496226", "salaryAnnualMin" : 113050, "salaryAnnualMax" : 152950, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security policy implementation", "System authorization", "Continuous monitoring", "Hardware/software inventory", "Leadership", "Information System Security", "Risk Management Framework", "Cybersecurity", "Security Analysis", "Risk Assessment", "Incident Response", "Configuration Management", "Compliance", "Assessment and Authorization", "Classified computing domains", "DAAG", "CNSSI 1253", "ICD-503", "JSIG", "NIST SP 800", "DFARs compliance", "IAM Level 1 DoD 8140.03 compliant certification", "Security+ CE", "CAP", "CISSP", "CASP", "CISM", "GSLC", "NESSUS", "ACAS", "DISA STIGs", "SCAP", "HBSS" ], "skillCount" : 33, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 883.7587, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a305872f292fd229cf42242", "title" : "Senior Information Security Engineer", "company" : "Strategic Systems International", "industry" : "Cybersecurity", "salary" : { "min" : 5000000.0, "max" : 9000000.0, "currency" : "PKR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Information Security Engineer in Lahore, Pakistan, adjusted for industry and seniority." }, "location" : "Lahore, PK", "locations" : [ "Lahore", "PK" ], "timestamp" : "2026-06-16T06:35:29.089", "fingerprint" : "cdc4bcd74d0e4b5b9b6029cbbb17999f968831330916b0fa1eb6190378c8f110", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://strategic-systems-international.breezy.hr/p/13df0023754f-senior-information-security-engineer", "externalId" : "13df0023754f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lahore", "country" : "Pakistan", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "31.5656822,74.3141829" } ], "locationText" : "Lahore, Pakistan", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Senior Information Security Engineer Overview We are seeking a highly motivated Senior Information Security Engineer to support and strengthen our organization", "summaryDescription" : "Senior Information Security Engineer at Strategic Systems International", "createdAt" : "2026-06-15T22:11:59.035", "lastUpdated" : "2026-06-16T06:35:29.089", "ingestTimestamp" : "2026-06-15T22:11:59.035", "mongoId" : "6a305872f292fd229cf42242", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 877.6961, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c60e574d8ee00a08f3838", "title" : "Computer Information Systems/Information Technology/Cybersecurity Instructor", "industry" : "Education", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Computer Information Systems/Information Technology/Cybersecurity Instructor in Columbus, United States, adjusted for industry and seniority." }, "location" : "Columbus, GA", "locations" : [ "Columbus, GA" ], "timestamp" : "2026-06-15T09:26:56.870", "fingerprint" : "da507d464558f5b30e8a4a230d9e41bf9e3a3fd932ba4fc3eeca227c6c6402b5", "source" : "jazzhr", "language" : "en", "externalId" : "9mhWrNWlJV", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Columbus", "state" : "Georgia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.4610708,-84.9880449" } ], "locationText" : "Columbus, Georgia, United States", "employmentType" : "FULL_TIME", "workSiteFlexibility" : "Onsite", "summaryDescription" : "Computer Information Systems/Information Technology/Cybersecurity Instructor", "createdAt" : "2026-06-14T07:08:00.061", "lastUpdated" : "2026-06-15T09:26:56.870", "ingestTimestamp" : "2026-06-14T07:08:00.061", "mongoId" : "6a2c60e574d8ee00a08f3838", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 75000, "salaryAnnualMax" : 110000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "education", "jobSubcategory" : "support", "seniorityLevel" : "Mid", "dataQualityScore" : 0.44444445, "_score" : 855.2333, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Education", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca53574d8ee00a09b52b5", "title" : "Agency Chief Information Security Officer", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 220000.0, "max" : 350000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an executive-level Agency Chief Information Security Officer in Singapore, adjusted for the government industry." }, "location" : "Cybersecurity", "locations" : [ "Cybersecurity" ], "certifications" : [ "CISSP", "CISM", "CCSP", "GCIH" ], "timestamp" : "2026-06-15T07:39:41.476", "fingerprint" : "2a08a63e3169fabc9c30dee6942eb5b9b48e68aee8965e6407ffb8276b383d1d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4004028201?gh_jid=4004028201", "externalId" : "4004028201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "technicalSkills" : "AWS, Azure, GCP, IaaS, PaaS, SaaS, Serverless, Containers, Microservices, Infrastructure as Code, CI/CD", "professionalSkills" : [ "Risk management", "Threat assessment", "Security architecture", "Incident response", "Security testing", "Risk mitigation", "Risk monitoring", "Risk reporting", "ICT asset oversight", "Security posture governance", "Security operations oversight", "Security awareness training", "Digital resilience", "Business requirements alignment", "WOG-wide advisories", "WOG-wide practices" ], "hardSkillsList" : [ "Threat-based risk assessments", "Incident response plan", "Security incident management", "ICT security incidents", "Cybersecurity awareness", "Cybersecurity training" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Threat-based risk assessments", "level" : "intermediate" }, { "name" : "Incident response plan", "level" : "intermediate" }, { "name" : "Security incident management", "level" : "intermediate" }, { "name" : "ICT security incidents", "level" : "intermediate" }, { "name" : "Cybersecurity awareness", "level" : "intermediate" }, { "name" : "Cybersecurity training", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Information security management, Cybersecurity governance, Cloud security, Risk management", "majorSkillsList" : [ "Information security management", "Cybersecurity governance", "Cloud security", "Risk management" ], "coreResponsibilities" : "Lead cybersecurity function, Support digital transformation, Ensure digital resilience, Formulate cybersecurity strategies, Implement cybersecurity strategies, Formulate policies, Implement policies, Formulate work plans, Implement work plans, Align with business goals, Enhance risk management, Conduct risk assessments, Mitigate risks, Monitor risks, Report risks, Consult on risk management, Endorse risk mitigation plans, Govern security posture, Enhance security posture, Maintain ICT asset visibility, Maintain ICT asset oversight, Maintain security architecture visibility, Maintain security architecture oversight, Maintain cybersecurity operations visibility, Maintain cybersecurity operations oversight, Develop incident response plan, Maintain incident response plan, Develop incident response playbooks, Maintain incident response playbooks, Plan security exercises, Design security exercises, Conduct security exercises, Lead incident investigation, Manage ICT security incidents, Provide advisory on technologies, Recommend cybersecurity technologies, Ensure secure by design development, Ensure security control compliance, Develop cybersecurity awareness programmes, Maintain cybersecurity awareness programmes, Develop cybersecurity training programmes, Maintain cybersecurity training programmes", "teamCollaboration" : "Collaborate with stakeholders; Collaborate with agency management; Collaborate with agency project teams; Collaborate with outsourced vendors; Work with multi-functional teams; Work with multi-disciplined teams", "projectManagementSkills" : [ "Risk management" ], "domainKnowledge" : "Cybersecurity Governance frameworks; Security Operations; Incident Response; Architecture design; Threat risk assessment; On-premises infrastructure security; Cloud security architectures; Native security features; Identity management systems; Security control implementations; Cloud service models; Cloud-native architectures; On-premises cybersecurity risks; Cloud-specific cybersecurity risks; Insider threats; Vendor risks; Data leakage; Malwares; Ransomware; Account hijacking; Compliance risks; Data security issues; Emerging threats; Emerging technologies; Compliance requirements", "domainList" : [ "cybersecurity-governance-frameworks", "security-operations", "incident-response", "architecture-design", "threat-risk-assessment", "on-premises-infrastructure-security", "cloud-security-architectures", "native-security-features", "identity-management-systems", "security-control-implementations", "cloud-service-models", "cloud-native-architectures", "on-premises-cybersecurity-risks", "cloud-specific-cybersecurity-risks", "insider-threats", "vendor-risks", "data-leakage", "malwares", "ransomware", "account-hijacking", "compliance-risks", "data-security-issues", "emerging-threats", "emerging-technologies", "compliance-requirements" ], "domainSpecificKnowledge" : [ "Cybersecurity Governance frameworks", "Security Operations", "Incident Response", "Architecture design", "Threat risk assessment", "On-premises infrastructure security", "Cloud security architectures", "Native security features", "Identity management systems", "Security control implementations", "Cloud service models", "Cloud-native architectures", "On-premises cybersecurity risks", "Cloud-specific cybersecurity risks", "Insider threats", "Vendor risks", "Data leakage", "Malwares", "Ransomware", "Account hijacking", "Compliance risks", "Data security issues", "Emerging threats", "Emerging technologies", "Compliance requirements" ], "communicationSkills" : "Communicate cyber security topics", "problemSolvingSkills" : "Risk assessment; Threat assessment; Root cause analysis", "specialRequirements" : "Singaporeans only", "qualificationsBasic" : "Degree in Computer Science, 8-10 years management experience, Solid grasp of ICT operations, Solid grasp of security policies, Solid grasp of business processes, Knowledge of security by design, Experience in security by design, Review of system architecture, DevSecOps practices, Infrastructure as Code tools, Securing CI/CD pipelines, Understanding cloud service models, Understanding core cloud services, Understanding modern cloud-native architectures, Identify cybersecurity risks, Assess risk impact, Assess risk likelihood, Evaluate existing controls, Recommend mitigation strategies, Understanding emerging threats, Understanding emerging technologies, Translate risk into business impact, Understanding compliance requirements, Identify potential violations, Communicate cyber security topics, CISSP certification", "qualificationsPreferred" : "Other related certifications, CISM certification, CCSP certification, GCIH certification", "rawDescription" : "GovTech supports various Government Agencies in carrying out ICT delivery services and appoints Agency Chief Information Security Officers (ACISO) to oversee information security management within these agencies. The ACISO is a leadership role that requires technical proficiency demonstrated in multiple cybersecurity domains. The role demands knowledge and/or practical experience in most of the domains below: Cybersecurity Governance frameworks, Security Operations including incident response, Architecture design and threat risk assessment, Security Testing. The ACISO must possess technical understanding of both on-premises infrastructure security and cloud security architectures across major platforms (e.g., AWS, Azure, and GCP), including their native security features, identity management systems, and security control implementations. [What you will be working on] Emplaced in public agencies and reporting to the agency’s Chief Information Officer (CIO) and Ministry Family CISO, you will collaborate with various stakeholders (GovTech HQ teams, Agency management, Agency project teams, and outsourced vendors) and will be responsible to: Lead the agency-level cybersecurity function in supporting agency digital transformation initiatives whilst ensuring digital resilience of agency systems. Formulate and implement agency cybersecurity strategies, policies and work plans, ensuring continuous alignment with Ministry Family's business strategic goals Review and enhance risk management through threat-based risk assessments, risk mitigations, risk monitoring and reporting. Provide consultation and endorse risk management and mitigation plans from agency’s project teams. Govern and enhance the agency's security posture by maintaining visibility and oversight of ICT assets, security architectures, and cybersecurity operations code of practices. Develop and maintain incident response plan and playbooks. This involves planning, designing and conduct of security incident response workshops and exercises (table-top exercises, simulation and drills) as well as lead the investigation and management of ICT security incidents. Provide advisory and recommendations on appropriate cybersecurity technologies to be deployed that meets agency’s business requirements and aligned with WOG-wide advisories and practices. Ensure secure by design ICT product development, and that security controls implementations comply with the defined security policies, standards and guidelines. Develop and maintain effective cybersecurity awareness and training programmes [What we are looking for] Degree in Computer Science, Information Systems, Engineering or related Technology field At least 8-10 years of management experience related to information security and solid grasp of ICT operations, security policies, business processes and the relationship between them. Ability to work with multi-functional, multi-disciplined teams to formulate, institute real time awareness of security posture and baseline among end users. Good interpersonal and partner/executive leadership skills. Demonstrate knowledge and experience in security by design implementations, review of system architecture, devsecops practices, Infrastructure as Code (IaC) tools and securing CI/CD pipelines  Demonstrate understanding of cloud service models (IaaS, PaaS, SaaS), coupled with a strong understanding of core cloud services and modern cloud-native architectures (serverless, containers, microservices) Identify on-premises and cloud-specific cybersecurity risks and threats, demonstrating skills to thoroughly assess their impact and likelihood. This assessment encompasses, but is not limited to, secure configurations, insider threats, vendor risks, data leakage, malwares including ransomware, account hijacking, and compliance risks. Evaluate the effectiveness of existing controls and recommending appropriate mitigation strategies for on-premises and cloud-related cybersecurity and data security issues. Display understanding of emerging threats and technologies, and the ability to translate risk into business impact Strong understanding of compliance requirements and the ability to identify potential violations in on-premises or cloud environments. Able to communicate cyber security topics effectively to senior stakeholders. Minimally possess CISSP certification, preferably with other related certifications, e. g. CISM, CCSP, GCIH that demonstrates continuous learning and knowledge of industry best practices. We believe in being Agile, Bold and Collaborative, and are looking for people who identify with these values. Singaporeans only.", "summaryDescription" : "Agency Chief Information Security Officer at GovTech. Skills: Information security management, Cybersecurity governance, Cloud security, Risk management. Lead cybersecurity function. Support digital transformation", "postedDate" : "2026-06-13T21:11:53.335", "createdAt" : "2026-06-13T21:11:53.335", "lastUpdated" : "2026-06-15T07:39:41.476", "ingestTimestamp" : "2026-06-13T21:11:53.335", "mongoId" : "6a2ca53574d8ee00a09b52b5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Threat-based risk assessments", "Incident response plan", "Security incident management", "ICT security incidents", "Cybersecurity awareness", "Cybersecurity training", "Leadership", "Information security management", "Cybersecurity governance", "Cloud security", "Risk management", "Threat assessment", "Security architecture", "Incident response", "Security testing", "Risk mitigation", "Risk monitoring", "Risk reporting", "ICT asset oversight", "Security posture governance", "Security operations oversight", "Security awareness training", "Digital resilience", "Business requirements alignment", "WOG-wide advisories", "WOG-wide practices", "Cybersecurity Governance frameworks", "Security Operations", "Incident Response", "Architecture design", "Threat risk assessment", "On-premises infrastructure security", "Cloud security architectures", "Native security features", "Identity management systems", "Security control implementations", "Cloud service models", "Cloud-native architectures", "On-premises cybersecurity risks", "Cloud-specific cybersecurity risks", "Insider threats", "Vendor risks", "Data leakage", "Malwares", "Ransomware", "Account hijacking", "Compliance risks", "Data security issues", "Emerging threats", "Emerging technologies", "Compliance requirements", "CISSP", "CISM", "CCSP", "GCIH" ], "skillCount" : 55, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.7777778, "_score" : 846.68, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "69ce5e3b9bc74574cb677960", "title" : "Information Security Consultant", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Technology", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Consultant in Beijing, China, adjusted for senior seniority and the technology industry." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP" ], "timestamp" : "2026-06-16T00:40:11.634", "fingerprint" : "a292e8ca2ab8e33feb17fa83068d132ff45387a45e2d7f1bce4df6ff3bd255ee", "source" : "taleo", "language" : "en", "applyUrl" : "https://daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873158", "externalId" : "873158", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "state" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9011168,116.4210134" } ], "locationText" : "Beijing, Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud Security, Network, Web Technologies, Database, Operating Systems", "professionalSkills" : [ "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations" ], "hardSkillsList" : [ "Security governance", "Security operations" ], "hardSkills" : [ { "name" : "Security governance", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" } ], "majorSkills" : "Security governance, Security operations, Risk Management, Compliance", "majorSkillsList" : [ "Security governance", "Security operations", "Risk Management", "Compliance" ], "domainKnowledge" : "Information Security; IT Assets; ISO 27001; NIST; ITIL", "domainList" : [ "information-security", "it-assets", "iso-27001", "nist", "itil" ], "domainSpecificKnowledge" : [ "Information Security", "IT Assets", "ISO 27001", "NIST", "ITIL" ], "qualificationsBasic" : "Experience with security frameworks, Experience with NIST, Experience with ISO 27001, CISA certification, CISSP certification, 5+ years experience", "remoteFriendly" : false, "rawDescription" : "Objective of job Ensure that the organization and IT assets follow the security standard and governance. You monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies. -Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization. -Responsible for organizational and technical controls -Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures -Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization -Assessing threats and developing appropriate security measures and assessing their effectiveness -Assist businesspartners in information classification -Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies [3] -Take care of actuality of disaster or application recovery plans -Develop and conduct target group orientated awareness campaigns -Define security controls derived from policies Job designation •Developing and Maintaining Security Policies and Standards Responsible for creating, updating, and enforcing information security policies, standards, and procedures that align with legal, regulatory, and contractual requirements. This includes ensuring that policies are comprehensive, clearly communicated, and regularly reviewed. •Ensuring Regulatory Compliance Ensure the organization complies with relevant laws, regulations, and industry standards such as ISO 27001, NIST, and others. This involves understanding the specific requirements of each regulation and implementing controls to meet them. •Security Audits and Assessments -Responsible for planning and conducting internal security audits to assess the effectiveness of security controls and identify areas for improvement. -Coordinate external audits and assessments, ensuring the organization is prepared and responsive to auditor requests. •Risk Management and Governance -Identifying, assessing, and managing information security risks across the organization. This includes conducting regular risk assessments, developing risk mitigation strategies, and monitoring the effectiveness of controls. -Contribute to the development of a strong governance framework for information security. •Compliance Reporting Responsible for preparing and submitting reports to management and regulatory bodies on the organization's security posture and compliance efforts. This includes tracking key security metrics, documenting compliance activities, and communicating security risks and issues to relevant stakeholders. •Policy Enforcement Responsible for ensuring that security policies are consistently enforced across the organization. This includes monitoring compliance with policies, investigating security violations, and taking corrective action when necessary •Supplier Risk Management Assesses the security practices of third-party suppliers and service providers to ensure they meet the organization's security requirements. This includes reviewing vendor contracts, conducting security assessments, and monitoring vendor compliance with security policies •Collaboration and Communication -Collaborating with other IT teams, developers, and business stakeholders. -Providing security training and awareness to employees. -Communicating security risks and recommendations to management. Qualification •Professional Skills: -Deep understanding and experience on: IT Security, Risk Management, Compliance & Security Standards, Knowledge in all relevant Operating Systems, Data Protection -Knowledge of: Cloud Security, Network, Web Technologies, Database, IT operations (ITIL) •Experience with security frameworks, such as NIST, and ISO 27001. •Relevant certifications, CISA, CISSP •> 5 years experience with focus in areas of security governance and security operations Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Information Security Consultant at Mercedes-Benz Group China Ltd.. Skills: Security governance, Security operations, Risk Management, Compliance", "createdAt" : "2026-06-14T18:46:29.111", "lastUpdated" : "2026-06-16T00:40:11.634", "ingestTimestamp" : "2026-06-14T18:46:29.111", "mongoId" : "69ce5e3b9bc74574cb677960", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security governance", "Security operations", "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations", "Information Security", "IT Assets", "ISO 27001", "NIST", "ITIL", "CISA", "CISSP" ], "skillCount" : 14, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 840.37573, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306035f292fd229cf882ff", "title" : "Lead Information Systems Security Officer (ISSO)", "company" : "Excella", "salary" : { "min" : 127944.0, "max" : 186600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, United States", "locations" : [ "Arlington", "Virginia", "United States", "Remote Flexible" ], "timestamp" : "2026-06-16T09:12:04.501", "fingerprint" : "d9d23dc8d3f15a73607c57112e43d8a38254b050e707b428c71aaf1681a518b8", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/excella/jobs/4706164005", "externalId" : "4706164005", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Excella is a transformative technology firm that helps organizations unlock new possibilities. We believe the key to helping clients challenge the status quo and reach new heights lies in our talented people. That’s why we’re committed to developing talent and providing opportunities for career growth at every stage. Join our collaborative team dedicated to solving complex problems with sustainable solutions while building your future as a leader. At Excella, you’re empowered to make lasting impact, turning today’s challenges into tomorrow’s mission successes. Workplace locations look different for everyone. Excellians are a distributed workforce and whether you're working from your home office or a client site, we support a flexible work/life integration regardless of your location. We offer top of industry medical, dental, and vision benefits with multiple options to choose from such as an employer-contributed health savings account, infertility coverage, and orthodontia so you can select the plan that works best for you. Regardless of what stage of life you’re in, Excella wants to support you. We provide 8 weeks of Parental Leave, discounted pet insurance, and a Care.com membership with 3 back-up emergency child or elder care days annually – all available to you on your first day. Starting day one, every employee is bonus eligible and receives 15 days of paid vacation, 6 federal holidays, and 4 floating holidays. Doing your best work means having the best tools! Excella’s TechEleX program provides you with multiple options to suit your technology needs. Choose between a variety of Mac or PC devices, and to ensure your hardware remains current, at the end of a 3-year period Excella will replace your existing computer with a new model from the program. Plus, we’ll even give you the original device to keep for your personal use! With Excella’s Annual Internet Reimbursement benefit, all employees receive an additional $25 per month to help offset the cost of internet access. This initiative reflects our commitment to supporting you in staying connected and productive, no matter where you work. We'll invest in your career by providing 3 days of paid professional development every year, including an allowance for registration fees to attend classes, conferences, or obtain professional certifications. We encourage mindfulness and overall well-being through employee wellness events, a HeadSpace membership, as well as access to TalkSpace and mental health coverage through our medical plans. Overview Excella is seeking an Information Systems Security Officer (ISSO) to support a federal government customer. In this role, you will lead efforts to gather and organize technical information about the program’s security posture and collaborate across teams to support ongoing security authorization activities. This position requires someone who can communicate effectively at all levels of the organization, exercise sound judgment with sensitive information, and proactively manage security documentation and compliance activities in a dynamic federal environment. The ability to hold and maintain a DHS Public Trust is required. Responsibilities Lead efforts to gather and organize technical information about the program’s security posture and collaborate across teams to support ongoing security authorization. Proactively create, monitor, and update the status of POA&Ms to ensure weaknesses are resolved in accordance with their scheduled completion dates. Create Waivers or Risk Acceptance Memos to support effective management of system risks. Conduct annual assessments in accordance with DHS Information Security Performance Plan guidance. Review and update security authorization documents as needed, at minimum annually. Coordinate with Privacy, Records, and Information Governance Divisions on compliance documentation and requirements. Conduct Contingency Plan tests at least annually and update the plan accordingly. Perform system self-assessments as part of the customer’s Ongoing Authorization program. Monitor and respond to Information Security Vulnerability Management (ISVM) and Patch Management requirements. Provide audit support (Financial, A-123, FISMA, internal, DHS, etc.) through all phases — Pre, During, and Post Audit. Maintain current knowledge of inventory within the accreditation boundary. Proactively ensure security requirements are incorporated into the development cycle (Waterfall, Agile, DevSecOps). Ensure configuration management processes are followed to prevent the introduction of new security risks. Respond to emerging requirements driven by legislation, regulation, or policy changes. Support annual independent assessments per DHS Information Security Performance Plan guidance. Qualifications 8+ years of experience in information security. Expertise in cybersecurity best practices, vulnerability management, and cybersecurity scanning tools. Expertise in Federal data privacy requirements and cloud-hosted cybersecurity management practices. One or more of the following certifications: CompTIA Security+ or equivalent Cloud Security certification (e.g., CCSP, AWS Security Specialty, Google Professional Cloud Security Engineer) Information Systems Security certification (e.g., CISSP, SSCP) Information Systems Security Management certification (e.g., CISM, CISSP-ISSMP) Ability to hold and maintain a DHS Public Trust. This range represents the minimum and maximum base salary that Excella reasonably and in good faith expects to pay for this role. Actual compensation within the range will depend on factors such as skills, experience, training, certifications, and organizational needs. It is not typical for an individual to be hired at or near the top or bottom of the range. Your pay also includes the opportunity for an annual bonus in addition to the base salary. This variable pay opportunity is dependent upon the attainment of shared firmwide goals and objectives as determined by Excella’s Executive Team. Certain eligibility and pro-ration rules apply. Should your experience and knowledge qualify you for a different position or title within Excella, we may consider you for positions that better align with your qualifications. In that case, we will provide the range for those positions as well. Pay Range $127,944—$186,600 USD Excella is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law. Excella is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact Recruiting@excella.com or 703-840-8600. KNOW YOUR RIGHTS", "summaryDescription" : "Lead Information Systems Security Officer (ISSO) at Excella", "postedDate" : "2026-06-15T23:24:50.546", "createdAt" : "2026-06-15T23:24:50.546", "lastUpdated" : "2026-06-16T09:12:04.501", "ingestTimestamp" : "2026-06-15T23:24:50.546", "mongoId" : "6a306035f292fd229cf882ff", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 127944, "salaryAnnualMax" : 186600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 834.5823, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb01074d8ee00a09d8b0f", "title" : "Information Systems Security Officer", "company" : "Swoop Technologies", "industry" : "Federal", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Systems Security Officer in Minneapolis-St. Paul, adjusted for mid-seniority in the technology industry." }, "location" : "Minneapolis-St. Paul", "locations" : [ "Minneapolis-St. Paul", "Washington DC - Baltimore Area" ], "certifications" : [ "DoD 8570/8140 IAM Level II", "DoD 8570/8140 IAM Level III", "CISSP", "CISM", "CASP+" ], "timestamp" : "2026-06-15T14:06:34.757", "fingerprint" : "947b2a95f31bdcdc44f9b292a3ed7630fcf67ba52fe561bce4207aa3fe68981b", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/swoop/a1609b21-24df-4f4a-b6a3-8f20b89837a5/application", "externalId" : "a1609b21-24df-4f4a-b6a3-8f20b89837a5", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Minneapolis-St. Paul", "state" : "Minnesota", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "44.9227049,-93.0554922" }, { "city" : "Washington DC", "state" : "District of Columbia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "38.8950982,-77.0363849" } ], "locationText" : "Minneapolis-St. Paul, Minnesota, United States; Washington DC, District of Columbia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "NIST SP 800-53, DoDI 8510.01, RMF process, ACAS, Nessus, STIG Viewer, SCAP, AWS GovCloud, Azure Government", "professionalSkills" : [ "System authorization", "Continuous monitoring", "Vulnerability scan analysis", "STIG review", "Security log auditing", "Security impact analyses", "POA&M tracking", "Remediation closure", "Cybersecurity guidance" ], "hardSkillsList" : [ "EMASS package management", "Control implementation statements", "Authorization package defense", "Vulnerability scan analysis", "STIG review validation", "Security log auditing", "Security impact analysis", "POA&M remediation" ], "hardSkills" : [ { "name" : "EMASS package management", "level" : "intermediate" }, { "name" : "Control implementation statements", "level" : "intermediate" }, { "name" : "Authorization package defense", "level" : "intermediate" }, { "name" : "Vulnerability scan analysis", "level" : "intermediate" }, { "name" : "STIG review validation", "level" : "intermediate" }, { "name" : "Security log auditing", "level" : "intermediate" }, { "name" : "Security impact analysis", "level" : "intermediate" }, { "name" : "POA&M remediation", "level" : "intermediate" } ], "majorSkills" : "RMF lifecycle, EMASS, NIST SP 800-53, Authorization packages", "majorSkillsList" : [ "RMF lifecycle", "EMASS", "NIST SP 800-53", "Authorization packages" ], "coreResponsibilities" : "Own eMASS package lifecycle, Develop RMF Body of Evidence artifacts, Maintain RMF Body of Evidence artifacts, Update RMF Body of Evidence artifacts, Coordinate with System Owners, Coordinate with ISSMs, Coordinate with SAs, Coordinate with government stakeholders, Execute continuous monitoring activities, Conduct security impact analyses, Document security impact analyses, Track POA&M findings, Provide cybersecurity guidance", "teamCollaboration" : "Government stakeholders; System Owners; ISSMs; SAs; Assessors; Program staff", "projectManagementSkills" : [ "RMF lifecycle management" ], "domainKnowledge" : "DoD environment; IC environment; DoD SCA; JSIG; DCSA; Service-specific overlays; Supplemental directives; cATO processes; Fast Track ATO; Cloud security; FedRAMP; CMMC Level 2; CMMC Level 3; DIB environment", "domainList" : [ "dod-environment", "ic-environment", "dod-sca", "jsig", "dcsa", "service-specific-overlays", "supplemental-directives", "cato-processes", "fast-track-ato", "cloud-security", "fedramp", "cmmc-level-2", "cmmc-level-3", "dib-environment" ], "domainSpecificKnowledge" : [ "DoD environment", "IC environment", "DoD SCA", "JSIG", "DCSA", "Service-specific overlays", "Supplemental directives", "cATO processes", "Fast Track ATO", "Cloud security", "FedRAMP", "CMMC Level 2", "CMMC Level 3", "DIB environment" ], "toolProficiency" : [ "EMASS", "ACAS", "Nessus", "STIG Viewer", "SCAP Compliance Checker", "Xacta", "ServiceNow GRC" ], "communicationSkills" : "Technical writing; Control implementation statements", "documentationSkills" : "SSP; SAR; RAR; POA&M; ConMon plans; Control implementation statements; Security impact analyses", "problemSolvingSkills" : "Fix actions; Compensating controls", "specialRequirements" : "Active Secret clearance, Active TS/SCI clearance", "outcomesObjectives" : "Keep systems authorized; Keep systems hardened; Keep systems audit-ready; Authorization packages current; Authorization packages accurate; POA&M remediation closure", "qualificationsBasic" : "Active Secret or TS/SCI clearance, 4+ years ISSO or IA experience, Demonstrated eMASS proficiency, Deep NIST SP 800-53 Rev 5, DoDI 8510.01 knowledge, Seven-step RMF process knowledge, Prepare authorization packages, Defend authorization packages, ACAS familiarity, STIG Viewer familiarity, SCAP Compliance Checker familiarity, DoD 8570/8140 IAM Level II, DoD 8570/8140 IAM Level III, Technical writing skills", "qualificationsPreferred" : "Air Force RMF programs experience, Army RMF programs experience, SOCOM RMF programs experience, Service-specific overlays experience, Supplemental directives experience, CATO processes familiarity, Fast Track ATO processes familiarity, Cloud security experience, FedRAMP control mapping experience, CMMC Level 2 compliance, CMMC Level 3 compliance, Xacta working knowledge, ServiceNow GRC working knowledge, RMF automation platforms knowledge", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Swoop: Swoop Technologies has a mission to organize and make accessible the world’s military and critical infrastructure. We are building a distributed operating system, SwoopOS, that decomposes the world’s equipment into a distributed robotic embodiment upon which a new generation of distributed systems, autonomous systems, and agentic AI can be built and deployed using our SDK, Valhalla, and operated via our browser, Surf. Imagine the world’s equipment - consisting of the electrical grid, communications architectures, manufacturing facilities, and militaries as a trapped supply of inputs possessing the potential to ensure Western military advantage, sovereign control of economically competitive manufacturing capacity, or the creation of a grid that fosters energy dominance. Swoop is liberating these trapped assets, allowing them to contribute to the world’s future as a series of building blocks to be combined at the speed of software, limited by only the hard constraints of physics and the soft constraints of safety. That is what Swoop is building. Not in the data center or cloud or edge on-premise computing node. In the physical world. This is a hybrid position that requires someone based in Minneapolis/St. Paul OR Washington DC who can work in-office 3+ days per week Your Impact: As our ISSO, you won't be maintaining compliance for its own sake — you'll be the person who keeps classified and CUI-adjacent systems authorized, hardened, and audit-ready so our engineers can do the work that matters. You'll own the RMF lifecycle end-to-end, interface directly with government AOs and SCA teams, and help build a security program that scales with a fast-moving defense tech company. If you want your ISSO work to feel consequential rather than administrative, this is the role. What You’ll Do: - Own end-to-end eMASS package lifecycle for one or more information systems — from initial system categorization through ATO maintenance and continuous monitoring - Develop, maintain, and update all RMF Body of Evidence artifacts: SSPs, SARs, RAR, POA&Ms, ConMon plans, and control implementation statements aligned to NIST SP 800-53 Rev 5 - Coordinate with System Owners, ISSMs, SAs, and government stakeholders (AOs, SCAs, CORs) to ensure authorization packages remain current and accurate - Execute continuous monitoring activities including vulnerability scan analysis (ACAS/Nessus), STIG review and validation via STIG Viewer/SCAP, and security log auditing - Conduct and document security impact analyses (SIAs) for proposed system changes; represent security equities at Configuration Control Board (CCB) proceedings - Track POA&M findings through remediation closure, providing fix actions and compensating controls where applicable - Support JSIG, DCSA, and/or DoD SCA assessment activities including artifact readiness reviews, evidence collection, and assessor coordination - Provide cybersecurity guidance to system administrators, developers, and program staff to promote compliant, secure operations throughout the system lifecycle You Should Have: - Active Secret or TS/SCI clearance - 4+ years of hands-on ISSO or IA experience in a DoD or IC environment - Demonstrated eMASS proficiency — end-to-end package management including artifact upload, milestone tracking, control inheritance documentation, and ATO submission - Deep working knowledge of NIST SP 800-53 Rev 5, DoDI 8510.01, and the seven-step RMF process - Experience preparing and defending authorization packages through government assessment and authorization cycles - Hands-on familiarity with ACAS (Tenable/Nessus), STIG Viewer, and SCAP Compliance Checker - DoD 8570/8140 IAM Level II or III certification (CISSP, CISM, CASP+, or equivalent) - Strong technical writing skills — you write SSP control implementation statements that satisfy assessors, not just fill boxes Bonus if you have: - Experience with Air Force, Army, or SOCOM RMF programs including service-specific overlays and supplemental directives (AFI 17-101, AR 25-2, JSIG) - Familiarity with cATO or Fast Track ATO processes - Cloud security experience (AWS GovCloud, Azure Government) and FedRAMP control mapping - Experience with CMMC Level 2/3 compliance in a DIB environment - Working knowledge of Xacta, ServiceNow GRC, or other RMF automation platforms as eMASS adjacents - Background as a sysadmin, network engineer, or security engineer — people who've touched the technical layer write better controls - Offensive security background or familiarity with adversary TTPs (enhances risk-based thinking in control selection and POA&M prioritization) Swoop Technologies is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, age, national origin, disability, protected veteran status, gender identity or any other factor protected by applicable federal, state, or local laws.", "summaryDescription" : "Information Systems Security Officer at Swoop Technologies. Skills: RMF lifecycle, EMASS, NIST SP 800-53, Authorization packages. Own eMASS package lifecycle. Develop RMF Body of Evidence artifacts", "createdAt" : "2026-06-14T09:46:44.255", "lastUpdated" : "2026-06-15T14:06:34.757", "ingestTimestamp" : "2026-06-14T09:46:44.255", "mongoId" : "6a2cb01074d8ee00a09d8b0f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "EMASS package management", "Control implementation statements", "Authorization package defense", "Vulnerability scan analysis", "STIG review validation", "Security log auditing", "Security impact analysis", "POA&M remediation", "RMF lifecycle", "EMASS", "NIST SP 800-53", "Authorization packages", "System authorization", "Continuous monitoring", "STIG review", "Security impact analyses", "POA&M tracking", "Remediation closure", "Cybersecurity guidance", "RMF lifecycle management", "DoD environment", "IC environment", "DoD SCA", "JSIG", "DCSA", "Service-specific overlays", "Supplemental directives", "cATO processes", "Fast Track ATO", "Cloud security", "FedRAMP", "CMMC Level 2", "CMMC Level 3", "DIB environment", "DoD 8570/8140 IAM Level II", "DoD 8570/8140 IAM Level III", "CISSP", "CISM", "CASP+", "ACAS", "Nessus", "STIG Viewer", "SCAP Compliance Checker", "Xacta", "ServiceNow GRC" ], "skillCount" : 45, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 826.5356, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca5f474d8ee00a09b8c7e", "title" : "IT & Cybersecurity Manager", "company" : "Nooks", "industry" : "Cybersecurity", "salary" : { "min" : 155000.0, "max" : 175000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Colorado Springs, Colorado, United States", "locations" : [ "Colorado Springs", "Colorado", "United States" ], "certifications" : [ "DoD 8570/8140 IAM Level III" ], "timestamp" : "2026-06-15T05:01:45.302", "fingerprint" : "34802dfd1ce43275651ae8eaeb82788c2f3ca85e89600eee1ff97cc21e5c0c3c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/nooks/jobs/4274144009", "externalId" : "4274144009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Colorado Springs", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8339578,-104.8253480" } ], "locationText" : "Colorado Springs, Colorado, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 10, "experienceLevel" : "Manager", "technicalSkills" : "Networking, Cloud infrastructure, IAM, Endpoint security", "professionalSkills" : [ "Risk assessment", "Budget management", "Vendor management", "Technology lifecycle management" ], "hardSkillsList" : [ "Incident response planning", "Configuration management", "Risk assessment", "Remediation" ], "softSkillsList" : [ "Leadership", "Service-first mindset" ], "hardSkills" : [ { "name" : "Incident response planning", "level" : "intermediate" }, { "name" : "Configuration management", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Service-first mindset" } ], "majorSkills" : "IT operations, Cybersecurity operations, Security protocols, Incident response", "majorSkillsList" : [ "IT operations", "Cybersecurity operations", "Security protocols", "Incident response" ], "coreResponsibilities" : "Foster technical growth, Develop leadership capabilities, Establish security protocols, Enforce security protocols, Develop incident response plans, Oversee hardware lifecycle, Oversee software lifecycle, Oversee networking assets lifecycle, Ensure maximum efficiency, Ensure minimal downtime, Ensure rigorous configuration management, Manage third-party service providers, Oversee IT/Cyber departmental budget, Prioritize security investments, Prioritize tech investments, Lead local response efforts for outages, Lead local response efforts for security events, Maintain clear communication channels, Maintain disciplined communication channels, Provide direct technical assistance, Troubleshoot complex issues, Support peak project demands, Support system migrations", "teamCollaboration" : "Corporate policy alignment; Federal frameworks alignment; Corporate leadership communication", "projectManagementSkills" : [ "Configuration management" ], "domainKnowledge" : "Classified Infrastructure-as-a-Service; NIST; DAAPM; JSIG; ISO 27001; SOC2; ITIL", "domainList" : [ "classified-infrastructure-as-a-service", "nist", "daapm", "jsig", "iso-27001", "soc2", "itil" ], "domainSpecificKnowledge" : [ "Classified Infrastructure-as-a-Service", "NIST", "DAAPM", "JSIG", "ISO 27001", "SOC2", "ITIL" ], "toolProficiency" : [ "ITSM tools", "Security monitoring tools" ], "communicationSkills" : "Clear communication; Disciplined communication", "innovationCreativity" : "Innovation", "problemSolvingSkills" : "Troubleshooting; Incident response", "specialRequirements" : "US citizen, Active Top Secret/SCI clearance, Maintain Top Secret/SCI eligibility", "outcomesObjectives" : "Ensure maximum efficiency; Ensure minimal downtime; Ensure rigorous configuration management", "qualificationsBasic" : "US citizen, Active Top Secret/SCI clearance, Maintain Top Secret/SCI eligibility, Bachelor's degree or higher, Active DoD 8570/8140 IAM Level III certification, 10+ years of experience in IT/Cyber operations, 3 years in leadership or management capacity, Implement and enforce enterprise IT and security policies, Experience leading IT and cybersecurity teams, Align operational and security priorities, Working knowledge of compliance frameworks, Broad technical understanding of networking, Broad technical understanding of cloud infrastructure, Broad technical understanding of IAM, Broad technical understanding of endpoint security, Risk assessment and remediation experience, Experience managing budgets, Experience managing vendors, Experience managing technology lifecycles, Proficiency with ITSM tools, Proficiency with security monitoring tools", "qualificationsPreferred" : "Maintain eligibility up to the Top Secret/SCI level within 45 days of hire", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT NOOKS Are you seeking an exciting and unique opportunity to grow and support our national security? As a startup, we are offering a limited-time opportunity to be an equity owner in a pioneering new industry. Nooks is pioneering Classified Infrastructure-as-a-Service (CIaaS) to provide government and industry partners with the fastest, most efficient access to classified infrastructure. We are building a nationwide network of accredited classified spaces and systems, ensuring that the best technologies equip our nation’s warfighters. At Nooks, we value innovation, collaboration, and a service-first mindset. ABOUT THE ROLE: As the IT foster technical growth and leadership capabilities within your team. Establish and enforce local security protocols and incident response plans in alignment with corporate policy and federal frameworks (NIST, DAAPM, JSIG, ISO 27001, or SOC2). Oversee the lifecycle of site hardware, software, and networking assets to ensure maximum efficiency, minimal downtime, and rigorous configuration management. Manage third-party service providers and oversee the IT/Cyber departmental budget, prioritizing high-ROI security and tech investments. Lead local response efforts for outages or security events while maintaining clear, disciplined communication channels with corporate leadership. Transition seamlessly from strategy to execution, providing direct technical assistance during complex troubleshooting, peak project demands, or system migrations. THE SKILLSET: You must be a US citizen and have an active Top Secret/SCI security clearance. Candidates must be capable of maintaining eligibility up to the Top Secret/SCI level within 45 days of hire. Bachelor’s degree or higher in Information Technology, Cybersecurity, Computer Science, or a related technical field. Active DoD 8570/8140 IAM Level III certification (CISSP, CISM, or GSLC). 10+ years of experience in IT/Cyber operations with at least 3 years in a leadership or management capacity. Proven ability to implement and enforce enterprise IT and security policies in regulated or classified environments. Experience leading IT and cybersecurity teams and aligning operational and security priorities. Working knowledge of compliance frameworks such as NIST, ISO 27001, SOC 2, and ITIL. Broad technical understanding of networking, cloud infrastructure, IAM, and endpoint security. Strong risk assessment and remediation experience aligned with enterprise risk tolerance. Experience managing budgets, vendors, and technology lifecycles within corporate governance models. Proficiency with ITSM and security monitoring tools to report operational health and compliance metrics. Salary Range for all departments Salary Range $155,000—$175,000 USD", "summaryDescription" : "IT & Cybersecurity Manager at Nooks. Skills: IT operations, Cybersecurity operations, Security protocols, Incident response. Foster technical growth. Develop leadership capabilities", "postedDate" : "2026-06-14T04:46:16.678", "createdAt" : "2026-06-14T04:46:16.678", "lastUpdated" : "2026-06-15T05:01:45.302", "ingestTimestamp" : "2026-06-14T04:46:16.678", "mongoId" : "6a2ca5f474d8ee00a09b8c7e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 175000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident response planning", "Configuration management", "Risk assessment", "Remediation", "Leadership", "Service-first mindset", "IT operations", "Cybersecurity operations", "Security protocols", "Incident response", "Budget management", "Vendor management", "Technology lifecycle management", "Classified Infrastructure-as-a-Service", "NIST", "DAAPM", "JSIG", "ISO 27001", "SOC2", "ITIL", "DoD 8570/8140 IAM Level III", "ITSM tools", "Security monitoring tools" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 825.49066, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305b66f292fd229cf5d483", "title" : "Information Security Controls Manager - Cloud & AI Governance", "company" : "N26", "industry" : "FinTech", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Controls Manager in Berlin, Germany, adjusted for mid-seniority, manager experience, and the FinTech industry." }, "location" : "Berlin, Berlin, Germany", "locations" : [ "Berlin", "Berlin", "Germany" ], "timestamp" : "2026-06-16T10:35:54.086", "fingerprint" : "8fce9c98261740ee5dfbe838b38b7804db25773ea364a760c90244432211549f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://n26.com/en-eu/careers/positions/7992395?gh_jid=7992395", "externalId" : "7992395", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Berlin", "state" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.5033790,13.3386522" } ], "locationText" : "Berlin, Berlin, Germany", "experienceLevel" : "Manager", "technicalSkills" : "Cloud Security, AI/ML, ISO 27001, ISO42001, NIST, BSI C5, DORA, EU AI Act, EU CRA, EU GDPR, AWS, Google Cloud", "professionalSkills" : [ "Risk assessment", "Control monitoring", "Evidence review", "Process improvement", "Documentation", "Reporting", "Audit support", "Process flow documentation", "Working instructions development" ], "hardSkillsList" : [ "Information security", "Cloud security benchmarks", "AI governance frameworks" ], "hardSkills" : [ { "name" : "Information security", "level" : "intermediate" }, { "name" : "Cloud security benchmarks", "level" : "intermediate" }, { "name" : "AI governance frameworks", "level" : "intermediate" } ], "majorSkills" : "Cloud Security, AI Governance, Information Security Controls", "majorSkillsList" : [ "Cloud Security", "AI Governance", "Information Security Controls" ], "coreResponsibilities" : "Operate Information Security Controls Framework processes, Monitor cloud infrastructure, Monitor AI/ML deployments, Collate evidence, Review evidence, Perform QA reviews, Query stakeholders, Seek clarification, Highlight gaps, Highlight risks, Raise non-conformities, Suggest improvements, Liaise with CISO office, Liaise with DPO office, Provide status updates, Provide compliance updates, Improve awareness of controls, Improve awareness of security practices, Improve awareness of responsible AI, Develop KRIs, Manage daily tasks, Update design of controls pages, Maintain control calendar, Work on change requests, Prepare change request tickets, Follow-up change request tickets, Draft monthly control reports, Publish monthly control reports, Draft other documentation, Publish other documentation, Support teams during audits, Support stakeholders during audits, Coordinate action items, Coordinate evidence, Maintain key documentation, Design controls, Develop working instructions, Develop procedures, Evaluate internal control frameworks, Map internal control frameworks, Document key processes, Update working instructions, Identify process inefficiencies, Identify tooling inefficiencies, Support AI enabled process optimizations, Map internal control framework to regulations, Map internal control framework to standards", "teamCollaboration" : "Communicate with stakeholders; Liaise with CISO office; Liaise with DPO office", "domainKnowledge" : "Cloud Security; AI Governance; ISO 27001; EU GDPR; DORA; SWIFT; NIS2; EU AI Act; Cloud Security Alliance; BSI C5; Banking IT-Systems", "domainList" : [ "cloud-security", "ai-governance", "iso-27001", "eu-gdpr", "dora", "swift", "nis2", "eu-ai-act", "cloud-security-alliance", "bsi-c5", "banking-it-systems" ], "domainSpecificKnowledge" : [ "Cloud Security", "AI Governance", "ISO 27001", "EU GDPR", "DORA", "SWIFT", "NIS2", "EU AI Act", "Cloud Security Alliance", "BSI C5", "Banking IT-Systems" ], "toolProficiency" : [ "Jira", "Confluence", "Google Workspace", "Google Sheets", "ServiceNow", "OneTrust" ], "communicationSkills" : "Communicate with stakeholders", "documentationSkills" : "Documentation; Working instructions; Procedures; Process flow documentation; Control reports; MoMs", "continuousLearning" : "Personal development budget", "innovationCreativity" : "Improvement ideas", "problemSolvingSkills" : "Analyze documentation; Evaluate documentation; Analyze reports; Evaluate reports; Analyze data; Evaluate data; Analyze flowcharts; Evaluate flowcharts", "qualificationsBasic" : "Bachelor's or Master's degree, 4-6 years experience, Information security compliance experience, Risk management experience, Audit role experience, Cloud Security controls experience, AI/ML governance risk frameworks experience, Information & Communication Technologies knowledge, Security controls knowledge, Fluency in English", "qualificationsPreferred" : "AWS/Google Cloud experience, Previous hands-on experience security standards, Experience with DORA, Experience with EU AI Act, Experience with EU CRA, Experience with EU GDPR, Audit/compliance frameworks experience, Compliance tools experience, German proficiency", "workSiteFlexibility" : "Hybrid", "rawDescription" : "About the opportunity We are seeking an Information Security Controls Manager to join the Information Risk Management (IRM) Segment within the Information Security (IS) Controls team at N26. As a member of this team, you will contribute to ensuring that Information Security Controls Framework processes are operated without any disruptions, with a specialized focus on strengthening our Cloud Security posture and AI Governance frameworks. N26 and its subsidiaries operate in a variety of regulatory environments and across international boundaries, while the IRM team helps N26 to navigate this complex, demanding, and rapidly evolving technological landscape. In this role, you will: Frequently communicate with various stakeholders of all levels. Execution and review of the Information Security (IS) Controls Framework monitoring process, ensuring comprehensive coverage of cloud infrastructure and AI/ML deployments. Communicate, Collate and review the evidence received via monthly control review request tickets (TOE). Perform QA reviews, query and or seek clarification from stakeholders to achieve the objectives of controls effectiveness. Highlight the gaps/risks observed during reviews, raise non-conformities, particularly concerning cloud misconfigurations and AI model risks, and suggest improvements to the teams or stakeholders. Liaise with the CISO office and the DPO office to provide updates on a monthly basis over the status of controls, including compliance updates regarding cloud security and AI systems. Improve awareness of controls, security practices, and responsible AI utilization among stakeholders. Contribute to the team in developing KRIs tailored to traditional IT, Cloud environments, and AI use cases. Working independently and managing the IS Controls daily tasks. Review and update the design of the controls pages from a technical perspective and maintain the control calendar. Actively work on the change requests from stakeholders. Preparation and follow-up of Change Request tickets. Drafting and publishing of the monthly control reports & other documentation (MoMs). Support the team and stakeholders during audits and coordinating the action items and evidence. Maintain controls team’s key documentation to ensure audit readiness. Equally participate in designing controls, developing working instructions and procedures that are required based on security standards and regulations such as ISO 27001, EU GDPR, DORA, SWIFT, NIS2, and the EU AI Act. Evaluate and map internal control frameworks to cloud security benchmarks (e.g., Cloud Security Alliance (CSA), BSI C5) and AI governance frameworks. Facilitate and make sure that all key processes have been documented in an easy and efficient process flow. Design and update working instructions to implement the requirements coming from the policies. Identify and surface process or tooling-related inefficiencies and support AI enabled process optimizations Mapping of Internal control framework to the various regulations/Standards. What you need to be successful: Bachelor’s or Master’s degree, relevant to information security or computer science. You have approximately 4-6 years of experience in an information security compliance, risk, or audit role. Demonstrated experience or strong knowledge of Cloud Security controls (AWS/Google Cloud preferred) and AI/ML governance risk frameworks. Previous hands-on experience or knowledge on security standards such as ISO 27001, ISO42001, NIST, BSI C5, and other regulatory requirements like DORA, EU AI Act, EU CRA & EU GDPR. Good understanding of Information & Communication Technologies (ICT) and Security controls. Previous experience related to audit/compliance frameworks and methodologies is a plus. Ability to communicate clearly with peers, as well as stakeholders of all levels. You are proficient in using Jira, Confluence and Google Workspace apps. (i. e. Docs, Sheets, Slides). Good understanding of Google Sheets features and formulas. Previous experience with Compliance tools is a plus (i. e. ServiceNow, OneTrust..). Ability to analyze and evaluate documentation, reports, data, flowcharts etc., for IT processes such as system development, cloud infrastructure management, and IT operations. Fluency in English is strictly required. German proficiency is a plus. You have insight into information security and are willing to become deeply acquainted with EU regulatory laws, standard banking requirements, as well as cloud-native banking IT-Systems. You have a hands-on mentality and are comfortable to share improvement ideas about existing processes. What’s in it for you: Accelerate your career growth by joining one of Europe’s most talked about disruptors \uD83D\uDE80. Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation. As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members. Additional day of annual leave for each year of service. A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, experiences, and backgrounds. A relocation package with visa support for those who need it. Who we are N26 has reimagined banking for today’s digital world. Technology and design empower everything we do and it’s how we are building the global banking platform the world loves to use. We've eliminated physical branches, paperwork, and hidden fees for an elegant digital experience and supreme savings. Giving people the power to live and bank their way is what gets us out of bed in the morning and inspires the work that we do. We are headquartered in Berlin with offices in multiple cities across Europe, including Vienna and Barcelona, and a 1,500-strong team of more than 80 nationalities. Do you see yourself thriving in this role? We’d love to see your application even if you don’t meet 100% of the criteria. You may just be the right fit for this or other roles! Equal opportunities for all At N26, we believe our strength lies in our people and the varied perspectives they bring. We strive to build diverse teams that drive innovation and business success. We actively seek talent from all backgrounds and welcome applications from all genders, cultures, sexual orientations, abilities, neurodiversities, and ages. We are committed to providing an excellent and accessible candidate experience. If you require any accommodations to make this process work for you, please let us know. We’re here to support you! Discover more about Diversity & Inclusion at N26: https://n26.com/en-eu/diversity-and-inclusion", "summaryDescription" : "Information Security Controls Manager - Cloud & AI Governance at N26. Skills: Cloud Security, AI Governance, Information Security Controls. Operate Information Security Controls Framework processes. Monitor cloud infrastructure", "postedDate" : "2026-06-15T23:27:39.898", "createdAt" : "2026-06-15T23:27:39.898", "lastUpdated" : "2026-06-16T10:35:54.086", "ingestTimestamp" : "2026-06-15T23:27:39.898", "mongoId" : "6a305b66f292fd229cf5d483", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Information security", "Cloud security benchmarks", "AI governance frameworks", "Cloud Security", "AI Governance", "Information Security Controls", "Risk assessment", "Control monitoring", "Evidence review", "Process improvement", "Documentation", "Reporting", "Audit support", "Process flow documentation", "Working instructions development", "ISO 27001", "EU GDPR", "DORA", "SWIFT", "NIS2", "EU AI Act", "Cloud Security Alliance", "BSI C5", "Banking IT-Systems", "Jira", "Confluence", "Google Workspace", "Google Sheets", "ServiceNow", "OneTrust" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 825.3264, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca5f474d8ee00a09b8c78", "title" : "ISE Information Security-IT Generalist", "company" : "Nooks", "industry" : "Government", "salary" : { "min" : 95000.0, "max" : 105000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Colorado Springs, Colorado, United States", "locations" : [ "Colorado Springs", "Colorado", "United States" ], "certifications" : [ "Security+", "A+", "Network+", "DoD 8140 baseline certifications" ], "timestamp" : "2026-06-15T22:05:26.968", "fingerprint" : "9e9290390252c5bbc58cda60b6be1f84bcfbd8badc40af302c8ec0f068496352", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/nooks/jobs/4255017009", "externalId" : "4255017009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Colorado Springs", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8339578,-104.8253480" } ], "locationText" : "Colorado Springs, Colorado, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 1, "experienceMaxYears" : 3, "experienceLevel" : "Entry", "technicalSkills" : "SCI systems, ISR network, IT infrastructure, SCI-level networks", "professionalSkills" : [ "Systems compliance", "Incident response", "SCIF operations", "Access management", "System audits", "Vulnerability scans", "Continuous monitoring", "Policy development" ], "hardSkillsList" : [ "TEMPEST integrity", "Need-to-know principle" ], "hardSkills" : [ { "name" : "TEMPEST integrity", "level" : "intermediate" }, { "name" : "Need-to-know principle", "level" : "intermediate" } ], "majorSkills" : "Information Security, IT Generalist, SCI systems management", "majorSkillsList" : [ "Information Security", "IT Generalist", "SCI systems management" ], "coreResponsibilities" : "Implement security controls for SCI systems, Maintain security controls for SCI systems, Identify security violations, Report security violations, Mitigate security violations, Monitor IT infrastructure in SCIFs, Manage IT infrastructure in SCIFs, Administer IdAM for SCI networks, Enforce need-to-know principle, Conduct weekly system audits, Conduct vulnerability scans, Maintain Authorization to Operate (ATO), Draft System Security Plans, Update System Security Plans, Draft Standard Operating Procedures, Update Standard Operating Procedures", "domainKnowledge" : "DoDM 5105.21-V1; Intelligence Community Directives; SCI systems; ISR network; SCIF construction; NIST SP 800-53", "domainList" : [ "dodm-5105-21-v1", "intelligence-community-directives", "sci-systems", "isr-network", "scif-construction", "nist-sp-800-53" ], "domainSpecificKnowledge" : [ "DoDM 5105.21-V1", "Intelligence Community Directives", "SCI systems", "ISR network", "SCIF construction", "NIST SP 800-53" ], "toolProficiency" : [ "DoDM 5105.21-V1", "ICD 503", "RMF standards", "ICD 705", "NIST SP 800-53" ], "documentationSkills" : "System Security Plans; Standard Operating Procedures", "problemSolvingSkills" : "Mitigate security violations", "specialRequirements" : "Occasional travel, Work in SCIFs, Physical requirements, Climbing stairs/ladders, Working in confined spaces", "outcomesObjectives" : "Maintain Authorization to Operate (ATO)", "qualificationsBasic" : "1-3 years IT security experience, 1+ year managing SCI/SAP systems, Meet DoD 8140/8570.01-M requirements, Possess and maintain Secret clearance, U.S. Citizenship required", "qualificationsPreferred" : "Security+ certification, A+ certification, Network+ certification, Other DoD 8140 baseline certifications, Experience with DoD SCI/SAP networks, Bachelor's degree in Cybersecurity, Bachelor's degree in Information Technology, Bachelor's degree in Computer Science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT NOOKS Are you seeking an exciting and unique opportunity to grow and support our national security? As a startup, we are offering a limited-time opportunity to be an equity owner in a pioneering new industry. Nooks is pioneering Classified Infrastructure-as-a-Service (CIaaS) to provide government and industry partners with the fastest, most efficient access to classified infrastructure. We are building a nationwide network of accredited classified spaces and systems, ensuring that the best technologies equip our nation’s warfighters. At Nooks, we value innovation, collaboration, and a service-first mindset. ABOUT THE ROLE: We are seeking an Information Security (INFOSEC) IT Generalist to support the U. S. Space Force’s Sensitive Compartmented Information (SCI) and Intelligence, Surveillance, and Reconnaissance (ISR) network as part of our Integrated Security Enterprise (ISE) program. This role helps to ensure that all IT operations comply with the physical, technical, and personnel security standards mandated by DoDM 5105.21-V1 and related Intelligence Community Directives (ICDs). KEY RESPONSIBILITIES: Systems Compliance: Implement and maintain security controls for SCI systems in accordance with DoDM 5105.21 and ICD 503/RMF standards. Incident Response: Lead the identification, reporting, and mitigation of security violations or \"spillages\" (Data Transfers) between classification levels. SCIF Operations: Monitor and manage IT infrastructure within Sensitive Compartmented Information Facilities (SCIFs), ensuring TEMPEST integrity and physical security of hardware. Access Management: Administer Identity and Access Management (IdAM) for SCI-level networks, ensuring the principle of \"need-to-know\" is strictly enforced. Audit & Continuous Monitoring: Conduct weekly system audits, vulnerability scans, and continuous monitoring to maintain the Authorization to Operate (ATO). Policy Development: Draft and update System Security Plans (SSP) and Standard Operating Procedures (SOPs) for SCI-cleared personnel. THE SKILLSET: Experience: 1-3 years in IT security, with at least 1 year specifically managing SCI or SAP-level systems. Technical Depth: Must meet DoD 8140/8570.01-M requirements (typically IAT Level II or III, e.g., Security+, or CISM). Knowledge: In-depth understanding of DoDM 5105.21-V1, ICD 705 (SCIF construction), and NIST SP 800-53. Clearance: Must possess and maintain either an Interim Secret or Secret eligibility security clearance. U. S. Citizenship is required. Candidates must be capable of maintaining eligibility up to the Secret level within 45 days of hire. This position supports mission operations and may require occasional travel to government facilities. PREFERRED QUALIFICATIONS: Certification: Security+, A+, Network +, or other DoD 8140 baseline certifications. Experience working with DoD SCI/SAP networks, i. e. AFSCI/COE JWICS, etc. Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field. This position requires the ability to travel to USSF and partner facilities, work in Sensitive Compartmented Information Facilities (SCIFs), and involves physical requirements such as climbing stairs/ladders or working in confined spaces to complete facility inspections and assessments. This employment offer is contingent upon continued funding of the underlying government contract. Should the contract be modified, or terminated, or if funding is reduced or eliminated, the employer reserves the right to adjust or rescind the offer accordingly. Salary Range for all departments Salary Range $95,000—$105,000 USD", "summaryDescription" : "ISE Information Security-IT Generalist at Nooks. Skills: Information Security, IT Generalist, SCI systems management. Implement security controls for SCI systems. Maintain security controls for SCI systems", "postedDate" : "2026-06-14T18:42:21.408", "createdAt" : "2026-06-14T18:42:21.408", "lastUpdated" : "2026-06-15T22:05:26.968", "ingestTimestamp" : "2026-06-14T18:42:21.408", "mongoId" : "6a2ca5f474d8ee00a09b8c78", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 105000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "TEMPEST integrity", "Need-to-know principle", "Information Security", "IT Generalist", "SCI systems management", "Systems compliance", "Incident response", "SCIF operations", "Access management", "System audits", "Vulnerability scans", "Continuous monitoring", "Policy development", "DoDM 5105.21-V1", "Intelligence Community Directives", "SCI systems", "ISR network", "SCIF construction", "NIST SP 800-53", "Security+", "A+", "Network+", "DoD 8140 baseline certifications", "ICD 503", "RMF standards", "ICD 705" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 1.0, "_score" : 824.4351, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305798f292fd229cf3bd0e", "title" : "HR Information Systems Manager", "company" : "Similarweb", "industry" : "Technology", "salary" : { "min" : 325000.0, "max" : 485000.0, "currency" : "ILS", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for an HR Information Systems Manager in Tel Aviv-Yafo, Israel, at a Manager level in the Technology industry, adjusted for company size and seniority." }, "location" : "Tel Aviv-Yafo, Israel", "locations" : [ "Tel Aviv-Yafo", "Israel" ], "timestamp" : "2026-06-16T10:46:11.444", "fingerprint" : "2a74c3acc7677e9700f43cac049efaaefa2f5379e77a1c449bef5e5d93f60f2d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/similarweb/jobs/8006825", "externalId" : "8006825", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tel Aviv-Yafo", "country" : "Israel", "continent" : "as", "source" : "llm", "workMode" : "hybrid", "geo" : "32.0852997,34.7818064" } ], "locationText" : "Tel Aviv-Yafo, Israel", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "professionalSkills" : [ "System ownership", "Data integrity", "System health", "Change responsiveness", "Enterprise technology" ], "hardSkillsList" : [ "HRIS configuration", "Role-based permissions", "System integrations", "API integrations", "Flat-file integrations" ], "hardSkills" : [ { "name" : "HRIS configuration", "level" : "intermediate" }, { "name" : "Role-based permissions", "level" : "intermediate" }, { "name" : "System integrations", "level" : "intermediate" }, { "name" : "API integrations", "level" : "intermediate" }, { "name" : "Flat-file integrations", "level" : "intermediate" } ], "majorSkills" : "HR Information Systems, SAP SuccessFactors, System integrations", "majorSkillsList" : [ "HR Information Systems", "SAP SuccessFactors", "System integrations" ], "coreResponsibilities" : "Own HR technology ecosystem, Manage SAP SuccessFactors, Manage related platforms, Bridge HR business needs and technology, Maintain system health, Maintain data integrity, Ensure responsiveness to change, Contribute to enterprise technology initiatives, Manage SF system configurations, Handle SF upgrades, Manage SF role-based permissions, Support SF Time Off module, Support SF Performance & Goals module, Support SF Compensation module, Manage HRIS implementations, Manage cross-functional systems projects, Manage system integrations, Manage integrations with ERP, Manage integrations with CRM, Manage integrations with business applications", "teamCollaboration" : "HR Operations; IT; MIS; External vendors; Cross-functional teams", "projectManagementSkills" : [ "HRIS implementations", "Systems projects" ], "domainKnowledge" : "HR employee lifecycle; Talent management; Compensation management; Learning management", "domainList" : [ "hr-employee-lifecycle", "talent-management", "compensation-management", "learning-management" ], "domainSpecificKnowledge" : [ "HR employee lifecycle", "Talent management", "Compensation management", "Learning management" ], "toolProficiency" : [ "SAP SuccessFactors", "Greenhouse", "Culture Amp", "NetSuite", "Salesforce" ], "continuousLearning" : "Ongoing learning solutions; Personalized coaching", "qualificationsBasic" : "5+ years HRIS experience, Experience with SAP SuccessFactors, Experience with Greenhouse, Experience with Culture Amp, Experience with system integrations, Experience with enterprise platforms, Experience with NetSuite, Experience with Salesforce, Experience with ERP, Experience with CRM", "qualificationsPreferred" : "Experience with SAP BTP, Experience with Workato, Experience with NetSuite, Experience with Salesforce, Experience with Time Off, Experience with Performance & Goals, Experience with Compensation, Experience with full-cycle HRIS implementations, Experience with cross-functional systems projects", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "At Similarweb, we are revolutionizing the way businesses interact with the digital world by revealing to them everything that happens online. Our unique data and solutions empower thousands of customers globally, including industry giants like Google, eBay, and Adidas, to make game-changing decisions that drive their digital strategies. In 2021, we went public on the New York Stock Exchange, and we continue to reach new heights! Come work alongside Similarwebbers across the globe who are bright, curious, practical, and good people. We are looking for an HR Information Systems Manager to join our team. Why is this role so important at Similarweb? The HR Information Systems Manager owns the organization's HR technology ecosystem, with primary responsibility for SAP SuccessFactors and related platforms (e.g., Greenhouse, Culture Amp). The role bridges HR business needs and technology, working closely with HR Operations, IT, MIS, and external vendors to maintain system health, data integrity, and responsiveness to change. Beyond HR systems, this role actively contributes to broader enterprise technology initiatives - including integrations with ERP (NetSuite), CRM, and other business applications. So, what will you be doing all day? SF System Ownership: Act as the expert for core modules, handling configurations, upgrades, and role-based permissions (RBP). Support Time Off, Performance & Goals, and Compensation are strong advantages) Experience managing full-cycle HRIS implementations and cross-functional systems projects Experience with system integrations (API, middleware, flat-file) and tools such as SAP BTP or Workato Familiarity with enterprise platforms such as NetSuite, Salesforce - a strong advantage Understanding of the full HR employee lifecycle: hire-to-retire, talent, compensation, and learning **At Similarweb, collaborating with our colleagues in-office creates a more connected, unified culture. Our best work is a product of our face-to-face collaboration, with the ability to work partially from home.** Why you’ll love being a Similarwebber: You’ll actually love the product you work with: Our customers aren’t our only raving fans. When we asked our employees why they chose to come work at Similarweb, 99% of them said “the product.” Imagine how exciting your job is when you get to work with the most powerful digital intelligence platform in the world. You’ll find a home for your big ideas: We encourage an open dialogue and empower employees to bring their ideas to the table. You’ll find the resources you need to take initiative and create meaningful change within the organization. We offer competitive perks & benefits: We take your well-being seriously, and offer competitive compensation packages to all employees. We also put a strong emphasis on community, with regular team outings and happy hours. You can grow your career in any direction you choose: Interested in becoming a VP or want to transition into a different department? Whether it’s Career Week, personalized coaching, or our ongoing learning solutions, you’ll find all the tools and opportunities you need to develop your career right here. Diversity isn’t just a buzzword: People want to work in a place where they can be themselves. We strive to create a workplace that is reflective of the communities we serve, where everyone is empowered to bring their full, authentic selves to work. We are committed to inclusivity across race, gender, ethnicity, culture, sexual orientation, age, religion, spirituality, identity and experience. Our culture of equality and mutual respect also helps us better understand and serve our customers in a world that is becoming more global, more diverse, and more digital every day. We will handle your application and information related to your application in accordance with the Applicant Privacy Policy available here.", "summaryDescription" : "HR Information Systems Manager at Similarweb. Skills: HR Information Systems, SAP SuccessFactors, System integrations. Own HR technology ecosystem. Manage SAP SuccessFactors", "postedDate" : "2026-06-15T23:21:15.943", "createdAt" : "2026-06-15T23:21:15.943", "lastUpdated" : "2026-06-16T10:46:11.444", "ingestTimestamp" : "2026-06-15T23:21:15.943", "mongoId" : "6a305798f292fd229cf3bd0e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "HRIS configuration", "Role-based permissions", "System integrations", "API integrations", "Flat-file integrations", "HR Information Systems", "SAP SuccessFactors", "System ownership", "Data integrity", "System health", "Change responsiveness", "Enterprise technology", "HRIS implementations", "Systems projects", "HR employee lifecycle", "Talent management", "Compensation management", "Learning management", "Greenhouse", "Culture Amp", "NetSuite", "Salesforce" ], "skillCount" : 22, "jobCategory" : "operations", "jobSubcategory" : "hr", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 820.8689, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a191e7758b93c861e39f6dc", "title" : "Information Security Consultant", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Consultant in Beijing, China, adjusted for senior seniority and the technology industry." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP" ], "timestamp" : "2026-06-15T09:53:12.916", "fingerprint" : "7e2caca3c00aa40e6265f8afe6cfca01e02ebb78252dfd0c2981b06992e945e7", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873158", "externalId" : "873158", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "state" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9011168,116.4210134" } ], "locationText" : "Beijing, Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud Security, Network Security, Web Technologies, Database Security, IT Operations", "professionalSkills" : [ "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations" ], "hardSkillsList" : [ "Security governance", "Security operations" ], "hardSkills" : [ { "name" : "Security governance", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" } ], "majorSkills" : "Information Security, Risk Management, Compliance, Security Standards", "majorSkillsList" : [ "Information Security", "Risk Management", "Compliance", "Security Standards" ], "coreResponsibilities" : "Monitor vulnerabilities, Identify vulnerabilities, Document vulnerabilities, Track remediation, Develop cloud security strategies, Implement cloud security strategies, Govern compliance with policies, Govern compliance with processes, Protect confidentiality, Protect integrity, Protect availability, Support risk assessment, Support risk analysis, Monitor risk control implementation, Monitor risk minimization implementation, Identify vulnerabilities in services, Identify vulnerabilities in applications, Order penetration services, Order assessment services, Monitor penetration services, Monitor assessment services, Ensure mitigation, Ensure minimization, Assess threats, Develop security measures, Assess effectiveness of measures, Assist business partners, Classify information, Coordinate security incidents, Participate in incident response, Develop mitigation strategies, Develop remediation strategies, Maintain disaster recovery plans, Maintain application recovery plans, Develop awareness campaigns, Conduct awareness campaigns, Define security controls, Create security policies, Update security policies, Enforce security policies, Align policies with requirements, Ensure policies are communicated, Review policies, Ensure regulatory compliance, Implement controls for regulations, Plan internal security audits, Conduct internal security audits, Assess effectiveness of controls, Identify areas for improvement, Coordinate external audits, Coordinate external assessments, Respond to auditor requests, Identify information security risks, Assess information security risks, Manage information security risks, Conduct risk assessments, Develop risk mitigation strategies, Monitor control effectiveness, Contribute to governance framework, Prepare compliance reports, Submit compliance reports, Track security metrics, Document compliance activities, Communicate security risks, Communicate security issues, Enforce security policies consistently, Investigate security violations, Take corrective action, Assess supplier security practices, Monitor vendor compliance, Collaborate with IT teams, Collaborate with developers, Collaborate with business stakeholders, Provide security training, Provide security awareness, Communicate recommendations to management", "teamCollaboration" : "Collaborate with IT teams; Collaborate with developers; Collaborate with business stakeholders", "domainKnowledge" : "Information Security; Cloud Security; Network Security; Web Technologies; Database Security; IT Operations; ISO 27001; NIST", "domainList" : [ "information-security", "cloud-security", "network-security", "web-technologies", "database-security", "it-operations", "iso-27001", "nist" ], "domainSpecificKnowledge" : [ "Information Security", "Cloud Security", "Network Security", "Web Technologies", "Database Security", "IT Operations", "ISO 27001", "NIST" ], "qualificationsBasic" : "5+ years experience, Security governance experience, Security operations experience, Experience with NIST, Experience with ISO 27001, Knowledge of IT Security, Knowledge of Risk Management, Knowledge of Compliance, Knowledge of Security Standards, Knowledge of Operating Systems, Knowledge of Data Protection, Knowledge of Cloud Security, Knowledge of Network, Knowledge of Web Technologies, Knowledge of Database, Knowledge of IT operations", "qualificationsPreferred" : "CISA certification, CISSP certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Objective of job Ensure that the organization and IT assets follow the security standard and governance. You monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies. -Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization. -Responsible for organizational and technical controls -Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures -Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization -Assessing threats and developing appropriate security measures and assessing their effectiveness -Assist businesspartners in information classification -Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies [3] -Take care of actuality of disaster or application recovery plans -Develop and conduct target group orientated awareness campaigns -Define security controls derived from policies Job designation •Developing and Maintaining Security Policies and Standards Responsible for creating, updating, and enforcing information security policies, standards, and procedures that align with legal, regulatory, and contractual requirements. This includes ensuring that policies are comprehensive, clearly communicated, and regularly reviewed. •Ensuring Regulatory Compliance Ensure the organization complies with relevant laws, regulations, and industry standards such as ISO 27001, NIST, and others. This involves understanding the specific requirements of each regulation and implementing controls to meet them. •Security Audits and Assessments -Responsible for planning and conducting internal security audits to assess the effectiveness of security controls and identify areas for improvement. -Coordinate external audits and assessments, ensuring the organization is prepared and responsive to auditor requests. •Risk Management and Governance -Identifying, assessing, and managing information security risks across the organization. This includes conducting regular risk assessments, developing risk mitigation strategies, and monitoring the effectiveness of controls. -Contribute to the development of a strong governance framework for information security. •Compliance Reporting Responsible for preparing and submitting reports to management and regulatory bodies on the organization's security posture and compliance efforts. This includes tracking key security metrics, documenting compliance activities, and communicating security risks and issues to relevant stakeholders. •Policy Enforcement Responsible for ensuring that security policies are consistently enforced across the organization. This includes monitoring compliance with policies, investigating security violations, and taking corrective action when necessary •Supplier Risk Management Assesses the security practices of third-party suppliers and service providers to ensure they meet the organization's security requirements. This includes reviewing vendor contracts, conducting security assessments, and monitoring vendor compliance with security policies •Collaboration and Communication -Collaborating with other IT teams, developers, and business stakeholders. -Providing security training and awareness to employees. -Communicating security risks and recommendations to management. Qualification •Professional Skills: -Deep understanding and experience on: IT Security, Risk Management, Compliance & Security Standards, Knowledge in all relevant Operating Systems, Data Protection -Knowledge of: Cloud Security, Network, Web Technologies, Database, IT operations (ITIL) •Experience with security frameworks, such as NIST, and ISO 27001. •Relevant certifications, CISA, CISSP •> 5 years experience with focus in areas of security governance and security operations Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Information Security Consultant at Mercedes-Benz Group China Ltd.. Skills: Information Security, Risk Management, Compliance, Security Standards. Monitor vulnerabilities. Identify vulnerabilities", "createdAt" : "2026-06-14T08:47:02.519", "lastUpdated" : "2026-06-15T09:53:12.916", "ingestTimestamp" : "2026-06-14T08:47:02.519", "mongoId" : "6a191e7758b93c861e39f6dc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security governance", "Security operations", "Information Security", "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations", "Cloud Security", "Network Security", "Web Technologies", "Database Security", "ISO 27001", "NIST", "CISA", "CISSP" ], "skillCount" : 16, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 809.27185, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a186a5b58b93c861e19a3e7", "title" : "Information Security Analyst", "company" : "Atlas Technica", "industry" : "Cybersecurity", "salary" : { "min" : 750000.0, "max" : 1200000.0, "currency" : "UAH", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Analyst in Ukraine, adjusted for mid-seniority and the technology industry." }, "location" : "Kyiv, UA", "locations" : [ "Kyiv", "UA" ], "timestamp" : "2026-06-16T00:31:55.002", "fingerprint" : "52cba4cb4f15e2d29f684e3375134effb5b7f002a312f984cd074a7cc489f42e", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://atlas-technica.breezy.hr/p/d65fc5dd4760-information-security-analyst", "externalId" : "d65fc5dd4760", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ukraine", "continent" : "as", "workMode" : "remote" } ], "locationText" : "Ukraine", "employmentType" : "FULL_TIME", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Position Name: Information Security Analyst Reports to: Chief Information Security Officer Location/Type: Remote (UA Candidates only) Atlas Technica", "summaryDescription" : "Information Security Analyst at Atlas Technica", "createdAt" : "2026-06-14T18:41:47.041", "lastUpdated" : "2026-06-16T00:31:55.002", "ingestTimestamp" : "2026-06-14T18:41:47.041", "mongoId" : "6a186a5b58b93c861e19a3e7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 807.25446, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c692274d8ee00a09062b7", "title" : "Chief Information Security Officer", "company" : "Sarvam", "industry" : "Engineering", "salary" : { "min" : 7500000.0, "max" : 1.25E7, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Executive Chief Information Security Officer in the Technology industry in Bengaluru, India, adjusted for seniority and company size." }, "location" : "Bengaluru", "locations" : [ "Bengaluru" ], "certifications" : [ "CISSP", "CISM" ], "timestamp" : "2026-06-16T00:41:38.759", "fingerprint" : "c5579bb11e7b1802741135aea9ae051716cafaf8003516a4eaad66af4031e0d6", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/sarvam/8b83a923-78ac-485d-a1b4-304ea526160c/application", "externalId" : "8b83a923-78ac-485d-a1b4-304ea526160c", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bengaluru", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bengaluru, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 99, "experienceLevel" : "Executive", "professionalSkills" : [ "Risk mitigation", "Stakeholder management", "Problem solving" ], "hardSkillsList" : [ "Vulnerability management" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" } ], "majorSkills" : "Information security leadership, Security compliance, Risk management", "majorSkillsList" : [ "Information security leadership", "Security compliance", "Risk management" ], "coreResponsibilities" : "Oversee compliance with security standards, Identify and assess vulnerabilities, Manage vulnerabilities across systems, Establish security policies, Drive security procedures, Drive security best practices, Integrate security into development lifecycle, Lead risk assessments, Lead audits, Lead security reviews, Ensure timely remediation of security issues, Ensure remediation of compliance gaps, Act as primary point of contact, Build security-focused culture, Mentor security-focused culture", "teamCollaboration" : "Product teams; Engineering teams; Platform teams", "domainKnowledge" : "Security compliance frameworks; ISO 27001; SOC 2; GDPR", "domainList" : [ "security-compliance-frameworks", "iso-27001", "soc-2", "gdpr" ], "domainSpecificKnowledge" : [ "Security compliance frameworks", "ISO 27001", "SOC 2", "GDPR" ], "communicationSkills" : "Stakeholder management; Communication", "problemSolvingSkills" : "Problem solving; Analytical abilities", "qualificationsBasic" : "Proven experience in information security leadership roles, Hands-on experience in vulnerability management, Ability to work cross-functionally, Excellent stakeholder management skills, Excellent communication skills, Analytical and problem-solving abilities", "qualificationsPreferred" : "Relevant certifications such as CISSP, Relevant certifications such as CISM, Experience in scaling security practices", "rawDescription" : "About Sarvam Sarvam is building the bedrock of Sovereign AI for India. The company is developing India’s full-stack sovereign AI platform, building across research, models, infrastructure and applications with a singular focus on making AI genuinely work for India. Sarvam works with leading enterprises and public institutions and is backed by Lightspeed, Peak XV, and Khosla Ventures. Sarvam partners with India’s leading brands, including Tata Capital, SBI Life, CRED, IDFC, and LIC. About the Role We are looking for an experienced and strategic Chief Information Security Officer (CISO) to lead and strengthen our organization’s information security posture. The ideal candidate will be responsible for overseeing all security and compliance initiatives, managing vulnerabilities, and ensuring alignment of security practices across product and engineering teams. What You’ll Do - Oversee and ensure compliance with all relevant security standards, regulations, and frameworks applicable to the organization. - Identify, assess, and manage vulnerabilities across systems, applications, and infrastructure. - Establish and drive organization-wide security policies, procedures, and best practices. - Collaborate closely with product, engineering, and platform teams to integrate security into the development lifecycle. - Lead risk assessments, audits, and security reviews to proactively mitigate threats. - Ensure timely remediation of security issues and compliance gaps. - Act as the primary point of contact for all information security-related matters. - Build and mentor a security-focused culture across teams. What We're Looking For - Proven experience in information security leadership roles (preferably as a CISO or similar). - Strong understanding of security compliance frameworks (ISO 27001, SOC 2, GDPR, etc.). - Hands-on experience in vulnerability management and risk mitigation strategies. - Ability to work cross-functionally with product and engineering teams. - Excellent stakeholder management and communication skills. - Strong analytical and problem-solving abilities. Bonus Points - Relevant certifications such as CISSP, CISM, or equivalent. - Experience in scaling security practices in a fast-paced product/tech environment. Why Sarvam? Sarvam is a fast-moving, high talent-density team building full-stack AI for India, working on problems that push the frontiers of AI with real population-scale impact. - Work alongside researchers, engineers, builders, and business leaders who move fast and hold each other to a very high bar - High ownership and high impact, from day one - Everything we do is AI-first, from the way we build and ship to the way we think about problems - You can work on problems that could change how an entire country learns, works, and communicates If you want to work on problems at the frontier of AI in India, Sarvam is the place to be. ", "summaryDescription" : "Chief Information Security Officer at Sarvam. Skills: Information security leadership, Security compliance, Risk management. Oversee compliance with security standards. Identify and assess vulnerabilities", "createdAt" : "2026-06-14T19:27:09.187", "lastUpdated" : "2026-06-16T00:41:38.759", "ingestTimestamp" : "2026-06-14T19:27:09.187", "mongoId" : "6a2c692274d8ee00a09062b7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Information security leadership", "Security compliance", "Risk management", "Risk mitigation", "Stakeholder management", "Problem solving", "Security compliance frameworks", "ISO 27001", "SOC 2", "GDPR", "CISSP", "CISM" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 787.10333, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2d41ea74d8ee00a0b3c42b", "title" : "Information Security Officer", "company" : "NECT GmbH", "industry" : "Cybersecurity", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Director, Information Security Officer in Hamburg, Germany, adjusted for the technology industry." }, "location" : "Hamburg, Deutschland", "locations" : [ "Hamburg", "Deutschland" ], "timestamp" : "2026-06-15T22:44:56.993", "fingerprint" : "ab31e4ae8835c272ba436de6d624639ef68587de3d20d283163454ccf1380f8b", "source" : "softgarden_portal", "language" : "de", "applyUrl" : "https://nect.softgarden.io/job/63310079/Information-Security-Officer-all-genders-?jobDbPVId=275240653&l=en", "externalId" : "63310079_275240653", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hamburg", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.5501721,10.0013165" } ], "locationText" : "Hamburg, Germany", "summaryDescription" : "Information Security Officer at NECT GmbH", "createdAt" : "2026-06-14T21:55:52.797", "lastUpdated" : "2026-06-15T22:44:56.993", "ingestTimestamp" : "2026-06-14T21:55:52.797", "mongoId" : "6a2d41ea74d8ee00a0b3c42b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.44444445, "_score" : 783.6283, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.92 }, { "id" : "6a2c6a4c74d8ee00a090b2d9", "title" : "Information Systems Security Officer (ISSO)", "company" : "Centuria", "industry" : "BLITS 3.0", "salary" : { "min" : 145000.0, "max" : 195000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Systems Security Officer (ISSO) in Hanscom AFB, adjusted for Manager seniority and Government industry." }, "location" : "Hanscom AFB", "locations" : [ "Hanscom AFB" ], "certifications" : [ "Security+" ], "timestamp" : "2026-06-16T03:07:22.798", "fingerprint" : "d4e9a12a37687501db4d73f6677ccaf77d02964b4b7e18c3d239aa9bd0913dfb", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/centuria/2dc942a4-346e-4a51-9116-6824bcc5e7cf/apply", "externalId" : "2dc942a4-346e-4a51-9116-6824bcc5e7cf", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hanscom AFB", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.4583109,-71.2779671" } ], "locationText" : "Hanscom AFB, Massachusetts, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 6, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cybersecurity", "professionalSkills" : [ "Technical interchanges" ], "hardSkillsList" : [ "Information assurance" ], "hardSkills" : [ { "name" : "Information assurance", "level" : "intermediate" } ], "majorSkills" : "Information assurance, Cybersecurity", "majorSkillsList" : [ "Information assurance", "Cybersecurity" ], "coreResponsibilities" : "Develop information assurance program, Implement information assurance program, Oversee information assurance program, Maintain information assurance program, Supervise IA program, Enforce Air Force IA policies, Comply with WCSO policy, Ensure users have requisite security clearances, Ensure users have supervisory need-to-know authorization, Ensure users are aware of IA responsibilities, Ensure users receive IA refresher training, Develop C&A documentation, Maintain C&A documentation", "teamCollaboration" : "Work dynamically with people", "domainKnowledge" : "Air Force IA policies; DoD Cybersecurity Directives; Federal Cybersecurity Directives; AFIN enterprise", "domainList" : [ "air-force-ia-policies", "dod-cybersecurity-directives", "federal-cybersecurity-directives", "afin-enterprise" ], "domainSpecificKnowledge" : [ "Air Force IA policies", "DoD Cybersecurity Directives", "Federal Cybersecurity Directives", "AFIN enterprise" ], "documentationSkills" : "C&A documentation", "specialRequirements" : "TS/SCI clearance", "qualificationsBasic" : "Bachelor’s degree in Cybersecurity/Information technology or equivalent, 6 years’ experience with Cybersecurity practices within the DoD or other Federal Agency, Knowledge of Air Force, DoD and applicable Federal Cybersecurity Directives and Instructions, Security+ certification required, TS/SCI clearance", "qualificationsPreferred" : "An additional 4 years’ experience may substitute for the degree", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "## Description Job Title: Information Security Systems Officer (ISSO) Location: Hanscom AFB Clearance: TS/SCI Program: BLITS 3.0 Company/ Program Description: Centuria, a Service-Disabled Veteran-Owned Small Business (SDVOSB), has been delivering IT, Engineering, and Scientific solutions to the Federal Government since 2002. During our two decades of service, we have earned the trust and respect of our government clients for the simple reason that we have great people who are experts in their fields and take pride and ownership in everything they do. BLITS 3.0 PROGRAM DESCRIPTION: This role will be to directly support the mission of the 66th Air Base Group (66 ABG) to secure information and information systems; to support mission success through effective and efficient service delivery; and to sustain required infrastructure and capabilities. As one part of the greater Air Force Information Network (AFIN) enterprise, the 66 ABG Communications and Information Division (66 ABG/SC) has responsibilities in two categories (1) direct actions in support of Hanscom Air Force Base (HAFB) and geographically separated units (GSUs); and (2) indirect actions to support the AFIN enterprise. Successful solutions for this requirement are expected to have strengths in four areas: integration, flexibility, AFIN knowledge, and technical expertise. Job Responsibilities: · Develop, implement, oversee, and maintain customer organization information assurance (IA) program that identifies IA requirements, personnel, processes, and procedures. These requirements may be at the Secret, Top Secret (TS), TS/Sensitive Compartmentalized Information (SCI), or Special Access Program (SAP) level. · Supervise the customer organization’s IA program. · Implement and enforce all Air Force IA policies and procedures using the guidance within this instruction and applicable specialized IA publications. · Comply with the installation WCSO policy and direction. · Ensure all users have the requisite security clearances, supervisory need-to-know authorization, and are aware of their IA responsibilities (via IA training) before being granted access to Air Force information systems according to AFSSI 8522. · Ensure all users receive IA refresher training on an annual basis. · Develop and maintain Certification and Accreditation (C&A) documentation for organization-specific systems connected to the Hanscom Network. Job Requirements: · Bachelor’s degree in Cybersecurity/Information technology or equivalent · 6 years’ experience with Cybersecurity practices within the DoD or other Federal Agency. An additional 4 years’ experience may substitute for the degree. · Strong knowledge of Air Force, DoD and applicable Federal Cybersecurity Directives and Instructions · Work dynamically and effectively with people on projects (formal and informal) and conduct technical interchanges as required. · Security+ certification required. · TS/SCI clearance. ", "summaryDescription" : "Information Systems Security Officer (ISSO) at Centuria. Skills: Information assurance, Cybersecurity. Develop information assurance program. Implement information assurance program", "postedDate" : "2026-06-12T18:10:06.132", "createdAt" : "2026-06-12T18:10:06.132", "lastUpdated" : "2026-06-16T03:07:22.798", "ingestTimestamp" : "2026-06-14T21:25:59.500", "mongoId" : "6a2c6a4c74d8ee00a090b2d9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 195000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Information assurance", "Cybersecurity", "Technical interchanges", "Air Force IA policies", "DoD Cybersecurity Directives", "Federal Cybersecurity Directives", "AFIN enterprise", "Security+" ], "skillCount" : 8, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 771.1159, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a191e7758b93c861e39f752", "title" : "Information Security Consultant", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Information Security Consultant in Beijing, China, adjusted for the technology industry and a large company size." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP" ], "timestamp" : "2026-06-15T05:20:15.262", "fingerprint" : "dd6f7339502853ec618745bbfa408f63ca1130a2e121db46e809cf8d32e85f9f", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873138", "externalId" : "873138", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "state" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9011168,116.4210134" } ], "locationText" : "Beijing, Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "IT Security, Cloud Security, Network, Web Technologies, Database, Operating Systems", "professionalSkills" : [ "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT operations" ], "hardSkillsList" : [ "Penetration testing", "Vulnerability assessment" ], "hardSkills" : [ { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" } ], "majorSkills" : "Security governance, Security operations, Cloud security", "majorSkillsList" : [ "Security governance", "Security operations", "Cloud security" ], "coreResponsibilities" : "Monitor vulnerabilities, Identify vulnerabilities, Document vulnerabilities, Track remediation, Develop cloud security strategies, Implement cloud security strategies, Govern compliance, Protect confidentiality, Protect integrity, Protect availability, Support risk assessment, Support risk analysis, Monitor risk control implementation, Monitor risk minimization implementation, Identify vulnerabilities in services, Identify vulnerabilities in applications, Order penetration services, Order assessment services, Monitor penetration services, Monitor assessment services, Document assessment results, Ensure mitigation, Ensure minimization, Assess threats, Develop security measures, Assess measure effectiveness, Assist business partners, Classify information, Coordinate security incidents, Participate in incident response, Develop mitigation strategies, Develop remediation strategies, Maintain disaster recovery plans, Maintain application recovery plans, Conduct awareness campaigns, Define security controls, Create security policies, Update security policies, Enforce security policies, Align policies with requirements, Communicate policies, Review policies, Ensure regulatory compliance, Implement controls for regulations, Plan internal security audits, Conduct internal security audits, Assess control effectiveness, Identify improvement areas, Coordinate external audits, Coordinate external assessments, Prepare for audits, Respond to auditor requests, Identify information security risks, Assess information security risks, Manage information security risks, Conduct risk assessments, Develop risk mitigation strategies, Monitor control effectiveness, Develop governance framework, Prepare compliance reports, Submit compliance reports, Track security metrics, Document compliance activities, Communicate security risks, Communicate security issues, Enforce security policies consistently, Monitor policy compliance, Investigate security violations, Take corrective action, Assess supplier security practices, Review vendor contracts, Conduct vendor security assessments, Monitor vendor compliance, Collaborate with IT teams, Collaborate with developers, Collaborate with business stakeholders, Provide security training, Provide security awareness", "teamCollaboration" : "Cross-functional teams; Business stakeholders", "domainKnowledge" : "Information Security; ISO 27001; NIST; Cloud Security", "domainList" : [ "information-security", "iso-27001", "nist", "cloud-security" ], "domainSpecificKnowledge" : [ "Information Security", "ISO 27001", "NIST", "Cloud Security" ], "communicationSkills" : "Awareness campaigns", "documentationSkills" : "Document results", "problemSolvingSkills" : "Vulnerability identification; Threat assessment; Risk assessment", "qualificationsBasic" : "5+ years experience, Security governance experience, Security operations experience, Experience with NIST, Experience with ISO 27001", "qualificationsPreferred" : "CISA certification, CISSP certification", "remoteFriendly" : false, "rawDescription" : "Objective of job Ensure that the organization and IT assets follow the security standard and governance. You monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies. -Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization. -Responsible for organizational and technical controls -Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures -Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization -Assessing threats and developing appropriate security measures and assessing their effectiveness -Assist business partners in information classification -Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies [3] -Take care of actuality of disaster or application recovery plans -Develop and conduct target group orientated awareness campaigns -Define security controls derived from policies Job designation •Developing and Maintaining Security Policies and Standards Responsible for creating, updating, and enforcing information security policies, standards, and procedures that align with legal, regulatory, and contractual requirements. This includes ensuring that policies are comprehensive, clearly communicated, and regularly reviewed. •Ensuring Regulatory Compliance Ensure the organization complies with relevant laws, regulations, and industry standards such as ISO 27001, NIST, and others. This involves understanding the specific requirements of each regulation and implementing controls to meet them. •Security Audits and Assessments -Responsible for planning and conducting internal security audits to assess the effectiveness of security controls and identify areas for improvement. -Coordinate external audits and assessments, ensuring the organization is prepared and responsive to auditor requests. •Risk Management and Governance -Identifying, assessing, and managing information security risks across the organization. This includes conducting regular risk assessments, developing risk mitigation strategies, and monitoring the effectiveness of controls. -Contribute to the development of a strong governance framework for information security. •Compliance Reporting Responsible for preparing and submitting reports to management and regulatory bodies on the organization's security posture and compliance efforts. This includes tracking key security metrics, documenting compliance activities, and communicating security risks and issues to relevant stakeholders. •Policy Enforcement Responsible for ensuring that security policies are consistently enforced across the organization. This includes monitoring compliance with policies, investigating security violations, and taking corrective action when necessary •Supplier Risk Management Assesses the security practices of third-party suppliers and service providers to ensure they meet the organization's security requirements. This includes reviewing vendor contracts, conducting security assessments, and monitoring vendor compliance with security policies •Collaboration and Communication Collaborating with other IT teams, developers, and business stakeholders. Providing security training and awareness to employees. Communicating security risks and recommendations to management. Qualification •Professional Skills: -Deep understanding and experience on: IT Security, Risk Management, Compliance & Security Standards, Knowledge in all relevant Operating Systems, Data Protection -Knowledge of: Cloud Security, Network, Web Technologies, Database, IT operations (ITIL) •Experience with security frameworks, such as NIST, and ISO 27001. •Relevant certifications, CISA, CISSP •> 5 years experience with focus in areas of security governance and security operations Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Information Security Consultant at Mercedes-Benz Group China Ltd.. Skills: Security governance, Security operations, Cloud security. Monitor vulnerabilities. Identify vulnerabilities", "createdAt" : "2026-06-14T03:04:11.949", "lastUpdated" : "2026-06-15T05:20:15.262", "ingestTimestamp" : "2026-06-14T03:04:11.949", "mongoId" : "6a191e7758b93c861e39f752", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Penetration testing", "Vulnerability assessment", "Security governance", "Security operations", "Cloud security", "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT operations", "Information Security", "ISO 27001", "NIST", "Cloud Security", "CISA", "CISSP" ], "skillCount" : 16, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 767.2064, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305191f292fd229cf0245a", "title" : "Cybersecurity Policy Developer", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 85000.0, "max" : 130000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Policy Developer in Singapore, adjusted for the government industry." }, "location" : "PPS Policy, Plans and Strategy Cluster", "locations" : [ "PPS Policy", "Plans and Strategy Cluster" ], "certifications" : [ "CISSP", "CISA" ], "timestamp" : "2026-06-16T08:37:51.072", "fingerprint" : "d9ba5b201cb970ca566d20fe6d2bff294a0b7b765a0244293d4cacfd5b17eaff", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4004295201?gh_jid=4004295201", "externalId" : "4004295201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Azure, Google, DevSecOps", "professionalSkills" : [ "Policy compliance", "Governance", "Risk assessment", "Solutioning", "Network design", "Application development", "Project management", "IT audit" ], "hardSkillsList" : [ "Information security", "Cryptography" ], "hardSkills" : [ { "name" : "Information security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity policy, Risk management, Policy development", "majorSkillsList" : [ "Cybersecurity policy", "Risk management", "Policy development" ], "coreResponsibilities" : "Lead formulation of ICT Security policies, Support formulation of ICT Security policies, Develop policies, Assess policies, Review policies, Govern cyber activities, Promote awareness of security issues, Communicate security principles, Address policy queries, Assess exemption requests, Identify mitigation plans, Qualify mitigation plans, Quantify mitigation plans, Agree mitigation plans, Measure security health posture, Provide analytical studies, Provide trending of key risk indicators, Support security projects, Support system vulnerability assessments, Support audits of cyber programs, Find creative ways to address challenges", "teamCollaboration" : "Collaboration with stakeholders; Work with operational teams; Work with implementation teams", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Internet of Things; Hardware design protection; Mobile application management; Device management; Cloud hosting design; Cloud hosting implementation; CI/CD pipelines", "domainList" : [ "internet-of-things", "hardware-design-protection", "mobile-application-management", "device-management", "cloud-hosting-design", "cloud-hosting-implementation", "ci-cd-pipelines" ], "domainSpecificKnowledge" : [ "Internet of Things", "Hardware design protection", "Mobile application management", "Device management", "Cloud hosting design", "Cloud hosting implementation", "CI/CD pipelines" ], "communicationSkills" : "Communicate security principles", "innovationCreativity" : "Find creative ways", "problemSolvingSkills" : "Address complex challenges", "qualificationsBasic" : "3 years of relevant IT or infocomm security consulting, 3 years of project management, 3 years of IT audit and governance, Knowledge of IT security management principles and practices, Knowledge and experience of IM8/NIST/IS0 27001/2 policies /standards, Singapore Citizen only", "qualificationsPreferred" : "CISSP certification, CISA certification", "remoteFriendly" : false, "rawDescription" : "The Government Technology Agency (GovTech) aims to transform the delivery of Government digital services and products by taking an \"outside-in\" view, putting citizens and businesses at the heart of everything we do. We also develop the Smart Nation infrastructure and applications and facilitate collaboration with citizens and businesses to co-develop technologies. Join us as we support Singapore’s vision of building a Smart Nation - a nation of possibilities empowered through info-communications technology and related engineering. Do you want to apply your skills, knowledge and energy to implement cutting-edge infocomm technology and digital solutions that will change the lives of Singaporeans and the public? In GovTech, you can! The Cyber Security Group (CSG) is the cybersecurity arm of GovTech, committed to creating a safe and secure digital government. You will be part of the Policy Development team to formulate cybersecurity policy standards and guidelines. Job Description: Lead or Support the formulation of progressive ICT Security policies to ensure continuous and relevant protection of Government ICT assets Develop, assess and review existing and proposed policies in collaboration with stakeholders to govern cyber activities Promote awareness of security issues and communicate security principles among management and stakeholders Address policy queries, and assess exemption requests to ascertain relevance of preventive and detective controls to reduce risk of exposure Work with the operational and implementation teams to identify, qualify, quantify and agree proposed mitigation plans against any identified risks and that those risks have been captured with mitigation plans. Conduct the measurement of security health posture of Agencies and provide analytical studies and trending of key risk indicators Support limited scale security projects, system vulnerability assessments or audits of cyber programs if required Find creative ways to take on and address complex information security challenges across a variety of existing and emerging technologies and digital environments. Requirements: Degree in Infocomm Security, Computer Science, Computer/Electronics Engineering or Information Technology Possess CISSP and/or CISA certifications would be an advantage At least 3 years’ of relevant IT or inforcomm security consulting, project management, and/or IT audit and governance Knowledge of IT security management principles and practices Experience in one or more of the following areas will be an advantage; policy compliance and governance, risk assessment, solutioning, network design, application development, Internet of Things, cryptography, hardware design protection, mobile application/device management, cloud hosting design and implementation in AWS/Azure/Google, DevSecOps consulting, design and implementation of CI/CD pipelines, etc. Knowledge and experience of IM8/NIST/IS0 27001/2 policies /standards Singapore Citizen only", "summaryDescription" : "Cybersecurity Policy Developer at GovTech. Skills: Cybersecurity policy, Risk management, Policy development. Lead formulation of ICT Security policies. Support formulation of ICT Security policies", "postedDate" : "2026-06-15T23:17:53.254", "createdAt" : "2026-06-15T23:17:53.254", "lastUpdated" : "2026-06-16T08:37:51.072", "ingestTimestamp" : "2026-06-15T23:17:53.254", "mongoId" : "6a305191f292fd229cf0245a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Information security", "Cryptography", "Cybersecurity policy", "Risk management", "Policy development", "Policy compliance", "Governance", "Risk assessment", "Solutioning", "Network design", "Application development", "Project management", "IT audit", "Internet of Things", "Hardware design protection", "Mobile application management", "Device management", "Cloud hosting design", "Cloud hosting implementation", "CI/CD pipelines", "CISSP", "CISA" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 767.1748, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307f2df292fd229c055eaf", "title" : "Senior Information Security Engineer, Product Security Engineering", "industry" : "Cybersecurity", "salary" : { "min" : 165000.0, "max" : 235000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Information Security Engineer in Kirkland, United States, adjusted for seniority and industry." }, "location" : "[Kirkland, WA, USA, [Kirkland, WA, USA], Kirkland, null, WA, US]", "locations" : [ "[Kirkland, WA, USA, [Kirkland, WA, USA], Kirkland, null, WA, US]", "[New York, NY, USA, [New York, NY, USA], New York, null, NY, US]", "[Seattle, WA, USA, [Seattle, WA, USA], Seattle, null, WA, US]", "[Sunnyvale, CA, USA, [Sunnyvale, CA, USA], Sunnyvale, null, CA, US]" ], "timestamp" : "2026-06-16T11:50:28.658", "fingerprint" : "f57d4512af7f8cb0dc5df218e440476612d7d2c3c72cd8fd11d0343d88787a58", "source" : "google", "language" : "en", "externalId" : "86949748946150086", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kirkland", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6765382,-122.2070775" } ], "locationText" : "Kirkland, Washington, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "summaryDescription" : "Senior Information Security Engineer, Product Security Engineering", "postedDate" : "2026-06-16T01:51:13.433", "createdAt" : "2026-06-16T01:51:13.433", "lastUpdated" : "2026-06-16T11:50:28.658", "ingestTimestamp" : "2026-06-16T01:51:13.433", "mongoId" : "6a307f2df292fd229c055eaf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 165000, "salaryAnnualMax" : 235000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.5555556, "_score" : 765.9266, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68b706987fc9a711f0f6fd7a", "title" : "Business Information Risk Lead", "company" : "Audible, Inc.", "industry" : "Systems, Quality, Security Engineering, Security Industry Specialist, subsidiaries", "salary" : { "min" : 91800.0, "max" : 196300.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Newark, New Jersey, USA", "locations" : [ "Newark, New Jersey, USA" ], "certifications" : [ "CISSP", "SANS/GIAC", "CISA", "OSCP", "OSWA", "OSWE", "AWS" ], "timestamp" : "2026-06-15T04:54:42.776", "fingerprint" : "09fb2840d7ce8a25e39e58e45bedbbfd0d9190cbcc30e694e542f1308dd18d71", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3052427/apply", "externalId" : "79f79014-1b15-487b-8603-06f60c1aaa72", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Newark", "state" : "New Jersey", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7356570,-74.1723667" } ], "locationText" : "Newark, New Jersey, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "GenAI", "professionalSkills" : [ "Information security", "Risk assessment", "Data protection", "Insider threat", "Data sharing", "Third party risk", "Security audits", "Risk management", "Policy exceptions", "Risk metrics", "Compliance", "Secure improvements", "Technical trade-offs", "Risk profile" ], "hardSkillsList" : [ "Cybersecurity", "Information security", "Risk and Controls", "Privacy", "Insider threat", "Business information security", "Third party risk", "Incident response", "Threat modeling", "Risk mitigation", "Risk issue management", "Security standards", "Security frameworks", "Web application security", "Mobile application security", "Cloud technologies threats", "GenAI tools", "GenAI risks", "Risk translation" ], "softSkillsList" : [ "Mentoring", "Educator" ], "hardSkills" : [ { "name" : "Cybersecurity", "level" : "intermediate" }, { "name" : "Information security", "level" : "intermediate" }, { "name" : "Risk and Controls", "level" : "intermediate" }, { "name" : "Privacy", "level" : "intermediate" }, { "name" : "Insider threat", "level" : "intermediate" }, { "name" : "Business information security", "level" : "intermediate" }, { "name" : "Third party risk", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Risk mitigation", "level" : "intermediate" }, { "name" : "Risk issue management", "level" : "intermediate" }, { "name" : "Security standards", "level" : "intermediate" }, { "name" : "Security frameworks", "level" : "intermediate" }, { "name" : "Web application security", "level" : "intermediate" }, { "name" : "Mobile application security", "level" : "intermediate" }, { "name" : "Cloud technologies threats", "level" : "intermediate" }, { "name" : "GenAI tools", "level" : "intermediate" }, { "name" : "GenAI risks", "level" : "intermediate" }, { "name" : "Risk translation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" }, { "name" : "Educator" } ], "majorSkills" : "Business Information Risk, Information Security, Risk Management, Cybersecurity", "majorSkillsList" : [ "Business Information Risk", "Information Security", "Risk Management", "Cybersecurity" ], "coreResponsibilities" : "Safeguard digital landscape, Champion information security, Shape security strategy, Protect key assets and data, Conduct security assessments, Develop risk mitigation strategies, Provide expert guidance on security challenges, Partner with cross-functional groups, Embed security best practices, Foster cybersecurity awareness, Drive continuous improvement, Develop security risk metrics, Monitor security trends, Implement pragmatic security solutions, Empower security engineers, Champion security initiatives, Provide security training, Set direction for security of key assets, Serve as subject matter expert, Proactively assess data protection issues, Identify insider threat issues, Develop recommendations for data sharing, Identify identity and access management vulnerabilities, Develop recommendations for third party risk issues, Lead internal security assessments, Execute data usage assessments, Lead security investigations, Execute security audits, Support enterprise wide information security assessments, Support cyber risk assessments, Contribute to business risk strategic control requirements, Contribute to insider threat strategic control requirements, Contribute to third party risk management strategic control, Develop roadmaps for risk management, Contribute to security standards, Provide feedback on security control requirements, Manage GRC policy exceptions, Manage risk issue process, Maintain relevant security risk metrics, Promote transparency across measures, Monitor information security risks, Report information security risks to management, Provide guidance on risk, Provide guidance on compliance, Provide guidance on policy, Conduct security training, Conduct outreach to internal teams, Conduct outreach to external supply chain partners, Apply security knowledge to drive improvements, Apply business knowledge to drive improvements, Make technical trade-offs, Work with senior leaders, Design comprehensive view of risk profile, Deliver comprehensive view of risk profile", "teamCollaboration" : "Work with business teams; Work with product teams; Partner with cross-functional groups; Work with multiple stakeholder teams; Work with technical teams; Work with non-technical teams; Work with senior leaders", "projectManagementSkills" : [ "Roadmaps" ], "domainKnowledge" : "Information security; Cybersecurity; Data protection; Insider threat; Third party risk; Identity and access management; Web application security; Mobile application security; Cloud technologies; GenAI risks", "domainList" : [ "information-security", "cybersecurity", "data-protection", "insider-threat", "third-party-risk", "identity-and-access-management", "web-application-security", "mobile-application-security", "cloud-technologies", "genai-risks" ], "domainSpecificKnowledge" : [ "Information security", "Cybersecurity", "Data protection", "Insider threat", "Third party risk", "Identity and access management", "Web application security", "Mobile application security", "Cloud technologies", "GenAI risks" ], "communicationSkills" : "Translate risk for business leaders", "innovationCreativity" : "Proven innovation skills", "problemSolvingSkills" : "Identify security issues; Identify security risks; Develop mitigation plans; Develop solutions; Analytical abilities", "qualificationsBasic" : "BS in Cybersecurity, Computer Science, or other relevant degree, 5+ years in cyber and information security functions, Experience with risk mitigation and risk issue management, Experience with policy and standards, Experience with security frameworks, Experience with web and mobile application security, Experience with cloud technologies threats and risks, Experience using GenAI tools to improve processes, Experience with security risks GenAI poses, Experience mentoring non-tech community on complex technical issues, Experience translating risk for business leaders", "qualificationsPreferred" : "MS in Cybersecurity, Computer Science, or other relevant degree, Excellent writing and verbal communication skills, Ability to identify security issues and risks, Develop mitigation plans or solutions, Experience driving large scale, cross-organization initiatives, Sharp analytical abilities, Proven innovation skills to unblock adoption of security mechanisms", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At Audible, we believe stories have the power to transform lives. It’s why we work with some of the world’s leading creators to produce and share audio storytelling with our millions of global listeners. We are dreamers and inventors who come from a wide range of backgrounds and experiences to empower and inspire each other. Imagine your future with us. ABOUT THIS ROLE As a Business Information Risk Lead at Audible, you'll be at the forefront of safeguarding our digital landscape, championing information security across our entire ecosystem. In this pivotal role, you'll shape the direction of Audible's security strategy, working closely with business and product teams to protect key assets and data. You'll conduct comprehensive security assessments, develop risk mitigation strategies, and provide expert guidance on complex security challenges. Your influence will extend beyond the security team as you partner with cross-functional groups to embed security best practices, fostering a culture of cybersecurity awareness. You'll drive continuous improvement by developing metrics, monitoring trends, and implementing pragmatic solutions that balance security needs with business goals. As a mentor and educator, you'll empower security engineers, champion initiatives, and provide training to both internal teams and external partners. Join us in building a secure future for Audible, where your expertise will directly impact the protection of our customers and the integrity of our business. As a Business Information Risk Lead, you will... - Play a role in Audible InfoSec & Security Engineer org and work closely with the Audible business and product community, setting direction for security of key assets, data, and business processes; serving as a subject matter expert resource for security engineers, security champions, and business leaders inside and outside of our organization - Proactively assess, identify and develop recommendations regarding data protection, insider threat, data sharing, identity and access management, and third party risk issues and vulnerabilities by working with multiple stakeholder teams, including Privacy, Legal, HR, IT, etcetera - Lead and execute internal security and data usage assessments, investigations and security audits, while also supporting enterprise wide information security and cyber risk assessments with technical and non-technical teams - Contribute to the development of business risk, insider threat, and third party risk management strategic control requirements and roadmaps - Contribute to new, and provide feedback on existing security standards and control requirements, GRC policy exceptions and risk issue management process - Develop and maintain relevant security risk metrics to promote transparency across the organization; measures, monitors and reports on information security risks to management - Provide guidance on risk, compliance, and policy to technical and non-technical internal customers, including security training and outreach to internal teams and external supply chain partners - Apply your security and business knowledge to drive secure and pragmatic improvements broadly to Audible’s people, process, and assets, while making technical trade-offs between short versus long term security and business goals - Work with senior leaders across the organization and design and deliver a comprehensive view of their risk profile, which helps them to have more transparency on the risk within their org ABOUT AUDIBLE Audible is the leading producer and provider of audio storytelling. We spark listeners’ imaginations, offering immersive, cinematic experiences full of inspiration and insight to enrich our customers daily lives. We are a global company with an entrepreneurial spirit. We are dreamers and inventors who are passionate about the positive impact Audible can make for our customers and our neighbors. This spirit courses throughout Audible, supporting a culture of creativity and inclusion built on our People Principles and our mission to build more equitable communities in the cities we call home. Basic Qualifications: - BS in Cybersecurity, Computer Science, or other relevant degree. - 5+ years in cyber and information security functions, especially in areas including Risk and Controls, Privacy, insider threat, business information security, identity and access management, third party risk, incident response, threat modeling. - Experience with understanding risk mitigation and risk issue management, policy and standards, security frameworks (e.g. NIST, ISO, etc.) - Experience with web and mobile application security, and cloud technologies threats and risks. - Experience with using GenAI tools to improve processes - Experience with the security risks GenAI poses and how to mitigate them - Experience in mentoring a non-tech community on complex technical issues or ambiguous technical challenges. This includes translating risk for business leaders, helping them to understand how risk can impact the business Preferred Qualifications: - Excellent writing and verbal communication skills - MS in Cybersecurity, Computer Science, or other relevant degree - Ability to identify security issues and risks, and develop mitigation plans or solutions - Experience in driving large scale, cross-organization initiatives - Sharp analytical abilities and proven innovation skills to unblock adoption of security mechanisms - Relevant industry certifications (e.g., CISSP, SANS/GIAC, CISA, OSCP/OSWA/OSWE, AWS) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $91,800/year in our lowest geographic market up to $196,300/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Business Information Risk Lead at Audible, Inc.. Skills: Business Information Risk, Information Security, Risk Management, Cybersecurity. Safeguard digital landscape. Champion information security", "postedDate" : "2026-06-13T15:15:59.590", "createdAt" : "2026-06-13T15:15:59.590", "lastUpdated" : "2026-06-15T04:54:42.776", "ingestTimestamp" : "2026-06-13T15:15:59.590", "mongoId" : "68b706987fc9a711f0f6fd7a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3052427/apply", "salaryAnnualMin" : 91800, "salaryAnnualMax" : 196300, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Cybersecurity", "Information security", "Risk and Controls", "Privacy", "Insider threat", "Business information security", "Third party risk", "Incident response", "Threat modeling", "Risk mitigation", "Risk issue management", "Security standards", "Security frameworks", "Web application security", "Mobile application security", "Cloud technologies threats", "GenAI tools", "GenAI risks", "Risk translation", "Mentoring", "Educator", "Business Information Risk", "Information Security", "Risk Management", "Risk assessment", "Data protection", "Data sharing", "Security audits", "Risk management", "Policy exceptions", "Risk metrics", "Compliance", "Secure improvements", "Technical trade-offs", "Risk profile", "Roadmaps", "Identity and access management", "Cloud technologies", "CISSP", "SANS/GIAC", "CISA", "OSCP", "OSWA", "OSWE", "AWS" ], "skillCount" : 45, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 765.167, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c8cef74d8ee00a0977ae0", "title" : "Security Officer - Classified Information", "company" : "ICEYE Germany", "industry" : "Operations", "salary" : { "min" : 85000.0, "max" : 120000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager Security Officer in Berlin, Germany, adjusted for the defense industry and company size." }, "location" : "Berlin", "locations" : [ "Berlin" ], "timestamp" : "2026-06-16T03:19:34.454", "fingerprint" : "84d321020f97cdc967dd255ef42822ef3315ea75327eb774610b2ead5e22cb2c", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/iceye/b2cdf1d7-086c-4ea6-a76c-388c871a6148/application", "externalId" : "b2cdf1d7-086c-4ea6-a76c-388c871a6148", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.5173885,13.3951309" } ], "locationText" : "Berlin, Germany", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Risk management", "Regulatory compliance", "Legal analysis" ], "hardSkillsList" : [ "Classified information security", "Security framework design", "Personnel security clearances", "IT accreditation", "Secure area design", "Audit trail implementation", "Incident response procedures" ], "hardSkills" : [ { "name" : "Classified information security", "level" : "intermediate" }, { "name" : "Security framework design", "level" : "intermediate" }, { "name" : "Personnel security clearances", "level" : "intermediate" }, { "name" : "IT accreditation", "level" : "intermediate" }, { "name" : "Secure area design", "level" : "intermediate" }, { "name" : "Audit trail implementation", "level" : "intermediate" }, { "name" : "Incident response procedures", "level" : "intermediate" } ], "majorSkills" : "Classified information security, Security framework design, Regulatory compliance", "majorSkillsList" : [ "Classified information security", "Security framework design", "Regulatory compliance" ], "coreResponsibilities" : "Define and execute security roadmap, Build classified information security posture, Design security framework, Run security framework, Represent security framework to authorities, Advise partners on security posture, Act as company's official security officer, Lead interactions with authorities, Represent ICEYE Germany to regulators, Design and implement policies, Design and implement SOPs, Design and implement registries, Design and implement secure areas, Design and implement VS-NfD-konforme IT, Design and implement accreditation pathways, Design and implement audit trail, Drive personnel security clearances, Coordinate personnel clearances, Translate security requirements for business, Unblock bids and customer engagements, Lead partner ecosystem security, Help partners implement security posture, Assess partner security posture, Certify partner security posture, Grow security function team", "teamCollaboration" : "Cross-functional teams; Work with People Operations; Collaborate with sales; Collaborate with product; Collaborate with engineering; Work with industry partners; Work with supply chain", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "German classified information regime; SÜG; VSA; Geheimschutzhandbuch; Geheimschutzbetreuung by BMWi; NATO classification; EU classification; National security; Defence technology; Earth observation; Sovereign intelligence; SAR satellite constellation; VS-NfD; VS-VERTRAULICH; GEHEIM; NATO SECRET; EU SECRET; Facility security clearance; Personnel clearances; IT accreditation; VS-Verwahrgelass; Sicherheitsbereich; Ü1; Ü2; Ü3; Sicherheitsüberprüfung", "domainList" : [ "german-classified-information-regime", "sug", "vsa", "geheimschutzhandbuch", "geheimschutzbetreuung-by-bmwi", "nato-classification", "eu-classification", "national-security", "defence-technology", "earth-observation", "sovereign-intelligence", "sar-satellite-constellation", "vs-nfd", "vs-vertraulich", "geheim", "nato-secret", "eu-secret", "facility-security-clearance", "personnel-clearances", "it-accreditation", "vs-verwahrgelass", "sicherheitsbereich", "u1", "u2", "u3", "sicherheitsuberprufung" ], "domainSpecificKnowledge" : [ "German classified information regime", "SÜG", "VSA", "Geheimschutzhandbuch", "Geheimschutzbetreuung by BMWi", "NATO classification", "EU classification", "National security", "Defence technology", "Earth observation", "Sovereign intelligence", "SAR satellite constellation", "VS-NfD", "VS-VERTRAULICH", "GEHEIM", "NATO SECRET", "EU SECRET", "Facility security clearance", "Personnel clearances", "IT accreditation", "VS-Verwahrgelass", "Sicherheitsbereich", "Ü1", "Ü2", "Ü3", "Sicherheitsüberprüfung" ], "communicationSkills" : "Represent to authorities; Translate requirements", "documentationSkills" : "Audit-ready documentation", "continuousLearning" : "Training opportunities; Professional development; Certification schemes", "specialRequirements" : "Security screening, German security clearance", "outcomesObjectives" : "Operate at every classification level; Build defensible security framework; Achieve facility security clearance; Achieve accredited environments; Achieve path to GEHEIM; Obtain required personnel clearances; Participate in classified procurements; Partners reach required posture; Implement audit-ready documentation; Implement exercises; Implement incident-response procedures", "qualificationsBasic" : "Deep knowledge of German classified information regime, Track record as Sicherheitsbevollmächtigter, Working fluency in NATO and EU classification frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "- Job Title: Security Officer – Classified Information - Department: ICEYE Germany - Location: Germany (Berlin) - Reports to: CEO, ICEYE Germany - Employment type: Permanent - Working type: On-Site - Employment is subject to applicable security screening (incl. SUPO, where required) THE MISSION OF THE SECURITY OFFICER Build and own the classified information security posture that lets ICEYE Germany operate at every classification level our customers require — from VS-NfD through VS-VERTRAULICH, GEHEIM, and beyond, including the corresponding NATO and EU equivalents. You are the person who turns a blank page into a defensible, audit-ready security framework. You will design it, run it, and represent it to the German authorities who decide whether we can sit at the table on the most sensitive national security work in Europe. You are also the trusted advisor who helps our German industry partners reach the posture they need to deliver alongside us. This is a foundational role. You will not inherit a finished framework — you will build it, and you will be measured on outcomes twelve months from your start date. WHO WE ARE ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth. ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system. ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future. Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific. WHAT YOU'LL DO - Own the roadmap. Define and execute the twelve-month plan to take ICEYE Germany from current state to fully cleared operations at VS-NfD, VS-VERTRAULICH, and GEHEIM — including facility security clearance (Sicherheitsbescheid), personnel clearances, IT accreditation, and the operational processes that sit underneath. - Be the Sicherheitsbevollmächtigter. Act as the company's official security officer towards BMWi, BfV, BSI, BAAINBw and other relevant authorities. Lead all interactions with the Geheimschutzbetreuende Stelle and represent ICEYE Germany in front of regulators with credibility and precision. - Build the framework. Design and implement policies, SOPs, registries, secure areas (VS-Verwahrgelass / Sicherheitsbereich), VS-NfD-konforme IT, accreditation pathways toward higher classifications, and the audit trail that makes the whole framework defensible. - Run the clearance pipeline. Drive personnel security clearances (Ü1, Ü2, Ü3) across the German organisation in close coordination with People Operations, candidates, and authorities — keeping timelines tight without compromising rigour. - Enable the business. Translate security requirements into language sales, product, and engineering can act on. Unblock bids and customer engagements rather than slow them down. - Lead the partner ecosystem. Serve as the lead figure helping ICEYE Germany's partners and supply chain implement the equivalent posture on their side — from initial assessment through to certification. - Grow the function. Start as an individual contributor with executive backing; scale the team as workload and classification scope demand it. WHAT WE MEASURE AFTER TWELVE MONTHS - ICEYE Germany holds a valid facility security clearance and operates accredited environments at VS-NfD and VS-VERTRAULICH, with a credible, authority-aligned path to GEHEIM. - The core German team holds the personnel clearances required for our priority programmes. - We are able to participate in classified procurements we could not have addressed without this work. - Key industry partners have reached the posture needed for joint delivery. - Audit-ready documentation, exercises, and incident-response procedures are in place and proven. WHAT WE ARE LOOKING FOR - Deep, hands-on knowledge of the German classified information regime: SÜG, VSA, Geheimschutzhandbuch, and the practical workings of Geheimschutzbetreuung by BMWi. - Track record as Sicherheitsbevollmächtigter (or directly equivalent) inside a German defence, intelligence, aerospace, or critical-infrastructure organisation — ideally one that scaled its classification level during your tenure. - Working fluency in NATO and EU classification frameworks (NATO SECRET, EU SECRET) and how they interlock with German national levels. - Credibility with German federal authorities. You have sat across the table from BMWi, BfV, BSI, BAAINBw or equivalents and know how they think and decide. - Strong grasp of IT security accreditation paths for classified systems — BSI Grundschutz, VS-NfD-konforme IT, and Zulassung for higher classifications. - Builder's mindset. You are energised by a blank page, fast-moving environments, and the responsibility of being the accountable owner. - Fluent German and English, with the ability to brief at executive, authority, and working level. APPLICATION PROCESS 1. Intro conversation with Talent Acquisition (30 min) 2. Hiring manager interview with the CEO, ICEYE Germany (60 min) 3. Technical case: a take-home roadmap exercise — staged plan from current state to GEHEIM, including facility, personnel, and IT accreditation — presented and defended live to a panel (90 min) 4. Cross-functional interviews with Operations, Legal/Compliance, and a senior ICEYE leader (3 × 45 min) 5. Final conversation with the CEO of ICEYE WHAT WE OFFER AT ICEYE At ICEYE, you will join a diverse and highly engaged team united by the ambition to make the impossible possible. We know that we will succeed only through exceptional people in our team — which is why your growth, wellbeing, and success are a priority. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. You will benefit from continuous professional development, training opportunities, and a culture that values collaboration, curiosity, and integrity. ICEYE is a place where your contributions have a visible impact, and where we celebrate success together. BENEFITS - A job that matters in a dynamic Defence Technology and Earth Observation environment with a scale-up approach - An independent role with a supportive and diverse work environment - Time for self-development, research, training, conferences, or certification schemes Employment is subject to applicable security screening, including German Sicherheitsüberprüfung (Ü1/Ü2/Ü3 as required by the role). OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION At ICEYE, we believe that diversity isn't just a buzzword – it's our greatest asset. We're committed to fostering an inclusive environment where every voice is not only heard but celebrated. We know that diverse perspectives breed innovation and creativity, which is why we actively seek out individuals from all walks of life, backgrounds, and experiences. Whatever your background, we want you to bring your authentic self to the table. Join us and be part of a team where differences are not only embraced but cherished, because together, we're stronger. We welcome applications from people of all backgrounds, including those who may need workplace adjustments. If you require any specific accommodations or assistance during the recruitment process for any reason, please let us know. Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.", "summaryDescription" : "Security Officer - Classified Information at ICEYE Germany. Skills: Classified information security, Security framework design, Regulatory compliance. Define and execute security roadmap. Build classified information security posture", "createdAt" : "2026-06-14T20:12:32.492", "lastUpdated" : "2026-06-16T03:19:34.454", "ingestTimestamp" : "2026-06-14T20:12:32.492", "mongoId" : "6a2c8cef74d8ee00a0977ae0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Classified information security", "Security framework design", "Personnel security clearances", "IT accreditation", "Secure area design", "Audit trail implementation", "Incident response procedures", "Regulatory compliance", "Risk management", "Legal analysis", "Roadmap planning", "German classified information regime", "SÜG", "VSA", "Geheimschutzhandbuch", "Geheimschutzbetreuung by BMWi", "NATO classification", "EU classification", "National security", "Defence technology", "Earth observation", "Sovereign intelligence", "SAR satellite constellation", "VS-NfD", "VS-VERTRAULICH", "GEHEIM", "NATO SECRET", "EU SECRET", "Facility security clearance", "Personnel clearances", "VS-Verwahrgelass", "Sicherheitsbereich", "Ü1", "Ü2", "Ü3", "Sicherheitsüberprüfung" ], "skillCount" : 36, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "_score" : 763.0954, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Defense", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305739f292fd229cf35bd6", "title" : "Senior Director, Information Security & Compliance", "company" : "Beeline Medicines", "industry" : "Biotech", "salary" : { "min" : 245000.0, "max" : 355000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Director, Information Security & Compliance in the US Biotech industry, adjusted for seniority and company size." }, "location" : "United States", "locations" : [ "United States" ], "timestamp" : "2026-06-16T08:47:41.814", "fingerprint" : "013ea186fd91a044d78c3a5e6a4ef0ae9f4939348a09530c3f27db232071a1ad", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/beelinemedicines/jobs/4286176009", "externalId" : "4286176009", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "hybrid" } ], "locationText" : "United States", "experienceMinYears" : 12, "experienceLevel" : "Director", "remoteFriendly" : true, "rawDescription" : "About Beeline Medicines: Beeline Medicines is a clinical‑stage biotechnology company focused on developing and delivering category-leading precision therapies to transform the lives of people living with autoimmune and inflammatory diseases. With a portfolio of potential best-in-class and first-in-disease therapeutic candidates that directly target key pathways governing dysregulated immunological and inflammatory responses, the Company is developing medicines that have the opportunity to provide durable, life-changing impact. Led by an established executive team and backed by world-class life science investors, each day Beeline Medicines is determined to bring the scientific rigor and operational excellence to get to what matters for patients – realizing a world where people with immune-mediated diseases can live life fully. Job Summary: The Senior Director, Information Security the incumbent will be expected to travel to Beeline Medicines’ offices on a periodic basis to support in-person collaboration, team engagement, and business operations. The frequency and scheduling of such visits will be determined at the company's discretion based on business need. Essential Duties and Responsibilities: Security Governance equivalent professional experience accepted. 12+ years of progressive information security experience with at least 5 years in a security leadership role (Manager, Director, or equivalent) preferred. Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation. Experience with security frameworks: NIST CSF, NIST SP 800-53, ISO 27001, or equivalent. Direct experience with SOX IT General Controls — either implementing ITGCs for IPO readiness or supporting ongoing SOX compliance at a public company. Strong working knowledge of Microsoft 365 security controls, including Entra ID, Conditional Access, Defender, and Purview. Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation. Experience managing managed security service providers (MDR, MSSP, or similar) and coordinating external security assessments (penetration testing, controls testing, risk assessments). Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation Independent judgment and self-direction — this role operates as a solo security practitioner at a small company and must prioritize effectively without day-to-day supervision. Strong written and verbal communication with the ability to translate security risks into business terms for executive and non-technical audiences. Salary Range: The expected salary range for this position varies by location and will be communicated based on the country or region in which the selected candidate is hired. Actual pay will be determined based on experience, qualifications, location, and other job-related factors permitted by applicable local law. A discretionary annual bonus and long-term incentive award (e.g., equity) may be available based on individual and Company performance. Salary Range $264,000—$285,000 USD Benefits: We offer a comprehensive benefits package tailored to the country and region in which you are hired, in compliance with local laws and practices. Benefits may include, but are not limited to: Competitive health and wellness coverage (structure and premiums vary by country) Paid time off, public holidays, and additional leave entitlements in accordance with local requirements Flexible work arrangements / hybrid schedule Benefits vary by location and are subject to eligibility requirements, local regulations, and plan terms. Specific benefit details applicable to your country or region will be provided during the offer process. Equal Employment Opportunity: Beeline Medicines is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, age, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. Reasonable Accommodation: If you require a reasonable accommodation to participate in the application or interview process, please contact careers@beelinemedicines.com to request an accommodation. We are committed to providing equal access to all candidates. Privacy Upon submission of this form I understand that Beeline Medicines is based in the United States and personal data submitted in the form will be transferred and accessed in the U.S., Information about Beeline Medicines privacy practices can be found at Privacy Policy - Beeline Medicines", "summaryDescription" : "Senior Director, Information Security & Compliance at Beeline Medicines", "postedDate" : "2026-06-15T23:20:59.512", "createdAt" : "2026-06-15T23:20:59.512", "lastUpdated" : "2026-06-16T08:47:41.814", "ingestTimestamp" : "2026-06-15T23:20:59.512", "mongoId" : "6a305739f292fd229cf35bd6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 245000, "salaryAnnualMax" : 355000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.7777778, "_score" : 758.3274, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Biotech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305126f292fd229cefb164", "title" : "Cleared On Site Mid-Level Information Systems Security Officers (ISSO)", "company" : "SMX", "salary" : { "min" : 105200.0, "max" : 176900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Hollywood, Maryland, United States", "locations" : [ "Hollywood", "Maryland", "United States" ], "certifications" : [ "DoD 8570.01-M IAM Level II or III", "CISSP" ], "timestamp" : "2026-06-16T06:41:20.995", "fingerprint" : "506b07b375446406cc2a5d27050c2f494877e3ce9f6fd918dcd99ef6289d7d6f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.smxtech.com/careers/?gh_jid=7772112003", "externalId" : "7772112003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Washington", "state" : "District of Columbia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8950982,-77.0363849" } ], "locationText" : "Washington, District of Columbia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Information Security, Risk Management, Vulnerability Management, Security Audits, Network Security, System Security, Security Policies, Security Procedures, Security Controls, Incident Response, Security Awareness Training, Security Architecture, Security Compliance, NIST, RMF, DIACAP, DoD, DISA STIGs, ACAS, HBSS", "professionalSkills" : [ "Risk assessment", "Security analysis", "Policy development", "Procedure development", "Compliance monitoring", "Training development", "Security architecture design", "Security control implementation", "Incident investigation", "Vulnerability assessment" ], "hardSkillsList" : [ "Risk management", "Vulnerability management", "Security audits", "Network security", "System security", "Security policy", "Security procedures", "Security controls", "Incident response", "Security awareness", "Security architecture", "Security compliance", "NIST RMF", "DIACAP", "DISA STIGs", "ACAS", "HBSS" ], "hardSkills" : [ { "name" : "Risk management", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "System security", "level" : "intermediate" }, { "name" : "Security policy", "level" : "intermediate" }, { "name" : "Security procedures", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security awareness", "level" : "intermediate" }, { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Security compliance", "level" : "intermediate" }, { "name" : "NIST RMF", "level" : "intermediate" }, { "name" : "DIACAP", "level" : "intermediate" }, { "name" : "DISA STIGs", "level" : "intermediate" }, { "name" : "ACAS", "level" : "intermediate" }, { "name" : "HBSS", "level" : "intermediate" } ], "majorSkills" : "Information Systems Security, Risk Management Framework, Security Compliance", "majorSkillsList" : [ "Information Systems Security", "Risk Management Framework", "Security Compliance" ], "coreResponsibilities" : "Develop and implement security policies and procedures, Conduct security audits and assessments, Manage vulnerability scanning and remediation, Implement and maintain security controls, Develop and deliver security awareness training, Support incident response activities, Ensure compliance with DoD and NIST standards, Document security architecture and configurations, Review and approve system security plans, Monitor security alerts and logs", "teamCollaboration" : "Cross-functional teams; System administrators; Network engineers; Program managers", "domainKnowledge" : "DoD Information Security; NIST RMF; DIACAP; DISA STIGs; Cybersecurity compliance", "domainList" : [ "dod-information-security", "nist-rmf", "diacap", "disa-stigs", "cybersecurity-compliance" ], "domainSpecificKnowledge" : [ "DoD Information Security", "NIST RMF", "DIACAP", "DISA STIGs", "Cybersecurity compliance" ], "toolProficiency" : [ "ACAS", "HBSS" ], "communicationSkills" : "Technical documentation; Security briefings", "documentationSkills" : "Security policies; Security procedures; System security plans; Security architecture documentation", "problemSolvingSkills" : "Root cause analysis; Troubleshooting security issues", "specialRequirements" : "Must possess an active Top Secret security clearance", "qualificationsBasic" : "5+ years of experience in Information Systems Security, Bachelor's degree in Information Systems, Cybersecurity, or related field, DoD 8570.01-M IAM Level II or III certification", "qualificationsPreferred" : "Master's degree in a related field, CISSP certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "SMX is seeking a highly motivated Information System Security Officer (ISSO) – Mid to support a mission-critical federal program in Washington, DC. This individual will serve as a key cybersecurity resource responsible for supporting the security posture, compliance activities, and operational security requirements of enterprise information systems and applications. The selected candidate will act as a trusted advisor to System Owners (SOs), Business Process Owners, Information System Security Managers (ISSMs), and cybersecurity leadership on matters related to information system security, risk management, and regulatory compliance. This role requires experience supporting Risk Management Framework (RMF) activities, implementing security controls, monitoring system security posture, and ensuring information systems remain compliant with federal cybersecurity requirements while supporting mission objectives. This position is on site in Washington, DC and requires an active TS/SCI clearance. Essential Duties & Responsibilities: Serve as a primary cybersecurity advisor to System Owners (SOs), Business Process Owners, and ISSMs on matters related to information system security Support implementation, maintenance, and continuous improvement of security controls across enterprise systems and applications Assist with Risk Management Framework (RMF) activities including system categorization, security control implementation, assessment support, and continuous monitoring Develop, maintain, and update security documentation including System Security Plans (SSPs), POA&Ms, security procedures, and supporting authorization artifacts Monitor system security posture and identify risks, vulnerabilities, and compliance gaps requiring remediation Coordinate with engineers, system administrators, developers, and security personnel to ensure security requirements are incorporated throughout the system lifecycle Support Authorization to Operate (ATO) activities and ongoing authorization maintenance efforts Conduct security reviews and assessments to validate implementation and effectiveness of security controls Assist in the identification, documentation, tracking, and remediation of security findings and vulnerabilities Review and validate user access controls, privileged accounts, hardware inventories, software inventories, and system configurations Support audit activities, compliance reviews, and cybersecurity inspections Provide guidance regarding physical and logical protection of information system assets Develop reports, metrics, and recommendations related to system security posture and compliance status Recommend improvements to security processes, procedures, and operational controls Support incident response, security investigations, and remediation activities as required Required Skills & Experience Active TS/SCI clearance required Minimum of 5 years of professional experience supporting cybersecurity, information assurance, RMF, or information system security activities Experience serving as an ISSO, cybersecurity analyst, security engineer, or related security role within a federal environment Experience supporting Risk Management Framework (RMF) activities and Authorization to Operate (ATO) processes Experience developing and maintaining SSPs, POA&Ms, security control documentation, and related authorization artifacts Familiarity with NIST 800-53, NIST 800-37, FISMA, and federal cybersecurity requirements Experience implementing and assessing security controls within enterprise information systems Experience supporting vulnerability management, remediation tracking, and continuous monitoring activities Knowledge of access control management, security documentation, and compliance reporting Strong analytical, troubleshooting, and problem-solving skills Ability to assess risks and recommend practical security solutions Strong written and verbal communication skills Ability to work independently while managing multiple priorities in a fast-paced environment Desired Skills & Experience Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field Experience supporting federal government, law enforcement, intelligence community, or national security programs Experience supporting cloud-based systems and cloud security compliance activities Experience supporting Governance, Risk, and Compliance (GRC) platforms Familiarity with enterprise security tools including vulnerability scanners, SIEM platforms, and compliance monitoring tools Experience supporting security audits, inspections, and assessment activities Familiarity with Agile development methodologies and DevSecOps practices One or more of the following certifications preferred: Security+ CAP (Certified Authorization Professional) SSCP GSEC CISSP Associate CASP+ Other relevant cybersecurity certifications Application Deadline: 9-4-2026 # LI-SA1 The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement. The proposed salary for this position is: $105,200—$176,900 USD At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success. We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what’s possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration. SMX is an Equal Opportunity employer including disabilities and veterans. Selected applicant may be subject to a background investigation and/or education verification. SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i. e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).", "summaryDescription" : "Cleared On Site Mid-Level Information Systems Security Officers (ISSO) at SMX. Skills: Information Systems Security, Risk Management Framework, Security Compliance. Develop and implement security policies and procedures. Conduct security audits and assessments", "postedDate" : "2026-06-15T23:15:34.638", "createdAt" : "2026-06-15T23:15:34.638", "lastUpdated" : "2026-06-16T06:41:20.995", "ingestTimestamp" : "2026-06-15T23:15:34.638", "mongoId" : "6a305126f292fd229cefb164", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 105200, "salaryAnnualMax" : 176900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk management", "Vulnerability management", "Security audits", "Network security", "System security", "Security policy", "Security procedures", "Security controls", "Incident response", "Security awareness", "Security architecture", "Security compliance", "NIST RMF", "DIACAP", "DISA STIGs", "ACAS", "HBSS", "Information Systems Security", "Risk Management Framework", "Security Compliance", "Risk assessment", "Security analysis", "Policy development", "Procedure development", "Compliance monitoring", "Training development", "Security architecture design", "Security control implementation", "Incident investigation", "Vulnerability assessment", "DoD Information Security", "Cybersecurity compliance", "DoD 8570.01-M IAM Level II or III", "CISSP" ], "skillCount" : 34, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 753.5385, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2cae8774d8ee00a09d5245", "title" : "Director of Information Security", "industry" : "Cybersecurity", "salary" : { "min" : 175000.0, "max" : 250000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Director of Information Security in the United States, adjusted for seniority and industry." }, "location" : "Moraine, OH", "locations" : [ "Moraine, OH" ], "timestamp" : "2026-06-16T03:07:00.150", "fingerprint" : "ab99a9287acb9f45abffa661eb184c5c64ccc5237428a902fbcefccf1031b5b8", "source" : "jazzhr", "language" : "en", "externalId" : "GtYdffG2sR", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Moraine", "state" : "Ohio", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.7061702,-84.2193849" } ], "locationText" : "Moraine, Ohio, United States", "experienceLevel" : "Director", "summaryDescription" : "Director of Information Security", "createdAt" : "2026-06-14T20:45:25.432", "lastUpdated" : "2026-06-16T03:07:00.150", "ingestTimestamp" : "2026-06-14T20:45:25.432", "mongoId" : "6a2cae8774d8ee00a09d5245", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 250000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.44444445, "_score" : 748.9088, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2d1a7a74d8ee00a0aef133", "title" : "Information Security Officer", "company" : "Marex", "industry" : "FinTech", "salary" : { "min" : 145000.0, "max" : 210000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Director, Information Security Officer in London, United Kingdom, adjusted for the FinTech industry." }, "location" : "London, GB", "locations" : [ "London", "GB" ], "timestamp" : "2026-06-15T05:26:11.721", "fingerprint" : "5c6eb92246e9a8636dcc1006b0947e66b9c5778958c45926eee68425150896d8", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://marex.breezy.hr/p/259f35f4852e01-information-security-officer", "externalId" : "259f35f4852e01", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "rawDescription" : "About Marex Marex Group plc (NASDAQ: MRX) is a diversified global financial services platform providing essential liquidity, market access and infrastructure services to clients across energy, commodities and financial markets. The group provides comprehensive breadth and depth of coverage across", "summaryDescription" : "Information Security Officer at Marex", "createdAt" : "2026-06-13T23:47:35.514", "lastUpdated" : "2026-06-15T05:26:11.721", "ingestTimestamp" : "2026-06-13T23:47:35.514", "mongoId" : "6a2d1a7a74d8ee00a0aef133", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.6666667, "_score" : 742.7855, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.92 }, { "id" : "6a305f3bf292fd229cf79f2d", "title" : "Cybersecurity Engineer", "industry" : "Growth Initiatives", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Engineer in Washington, United States, adjusted for industry and seniority." }, "location" : "Washington, DC (Hybrid)", "locations" : [ "Washington, DC (Hybrid)" ], "timestamp" : "2026-06-16T14:15:49.309", "fingerprint" : "be563ebc07eb041e70d0bc2989dab3c45d73e4f27dc9a09e1a4bb2d3e1389847", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/sprymethods/e248901d-227a-41dd-bf28-0c0a3c3765cb/apply", "externalId" : "e248901d-227a-41dd-bf28-0c0a3c3765cb", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Washington", "state" : "District of Columbia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "38.8950982,-77.0363849" } ], "locationText" : "Washington, District of Columbia, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust architecture, Cloud platforms, On-premises platforms, Hybrid environments, Authentication, Authorization, Role-based access control, Privileged access management, Multi-factor authentication, Centralized logging, Monitoring, Audit capabilities, Vulnerability assessment, System hardening, Application hardening, Cloud environment hardening", "professionalSkills" : [ "Risk analysis", "Change management", "Security posture improvement" ], "hardSkillsList" : [ "Security controls implementation", "Access management", "Least privilege", "Vulnerability management", "Incident response", "Security baselines", "Audit readiness", "Root cause analysis" ], "hardSkills" : [ { "name" : "Security controls implementation", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "Least privilege", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security baselines", "level" : "intermediate" }, { "name" : "Audit readiness", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity engineering, Security operations, Incident response", "majorSkillsList" : [ "Cybersecurity engineering", "Security operations", "Incident response" ], "coreResponsibilities" : "Implement enterprise security controls, Maintain enterprise security controls, Support security platform implementation, Support security platform operation, Support security platform optimization, Configure identity and access services, Manage identity and access services, Configure centralized logging, Configure monitoring, Configure audit capabilities, Conduct continuous monitoring, Conduct vulnerability assessment, Conduct risk analysis, Coordinate remediation, Harden systems, Harden applications, Harden cloud environments, Support incident response activities, Support forensic collection, Support root cause analysis, Support change management, Support SOP development, Collaborate with network teams, Collaborate with cloud teams, Collaborate with application teams, Resolve security issues, Improve security posture", "teamCollaboration" : "Network teams; Cloud teams; Application teams", "domainKnowledge" : "Federal security frameworks; Zero Trust architecture", "domainList" : [ "federal-security-frameworks", "zero-trust-architecture" ], "domainSpecificKnowledge" : [ "Federal security frameworks", "Zero Trust architecture" ], "documentationSkills" : "Standard operating procedure development", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Federal screening", "qualificationsBasic" : "Five years of experience in cybersecurity engineering, Experience implementing security controls, Experience with identity and access management, Experience with security baselines, Ability to meet federal screening", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "## What Your Day-To-Day Looks Like (Position Responsibilities) Implement and maintain enterprise security controls aligned to federal security frameworks and Zero Trust architecture. Support implementation, operation, and optimization of enterprise security platforms across cloud, on-premises, and hybrid environments. Configure and manage identity and access services, including authentication, authorization, role-based access control (RBAC), privileged access management (PAM), and multi-factor authentication (MFA). Configure centralized logging, monitoring, and audit capabilities across systems, applications, and cloud platforms. Conduct continuous monitoring, vulnerability assessment, risk analysis, and remediation coordination. Harden systems, applications, and cloud environments using secure baselines and industry best practices. Support incident response activities, forensic collection, root cause analysis, change management, and standard operating procedure (SOP) development. Collaborate with network, cloud, and application teams to resolve security issues and improve security posture. ## What You Need to Succeed (Minimum Requirements) Five years of experience in cybersecurity engineering or security operations. Experience implementing security controls in cloud, network, endpoint, and identity environments. Experience with identity and access management (IAM), least privilege, MFA, logging, monitoring, vulnerability management, and security incident response. Experience with security baselines, documentation, audit readiness, root cause analysis, and formal change management. Ability to meet federal screening and suitability requirements prior to start.", "summaryDescription" : "Cybersecurity Engineer. Skills: Cybersecurity engineering, Security operations, Incident response. Implement enterprise security controls. Maintain enterprise security controls", "postedDate" : "2026-06-14T15:47:12.782", "createdAt" : "2026-06-14T15:47:12.782", "lastUpdated" : "2026-06-16T14:15:49.309", "ingestTimestamp" : "2026-06-16T03:22:51.320", "mongoId" : "6a305f3bf292fd229cf79f2d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 195000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security controls implementation", "Access management", "Least privilege", "Vulnerability management", "Incident response", "Security baselines", "Audit readiness", "Root cause analysis", "Cybersecurity engineering", "Security operations", "Risk analysis", "Change management", "Security posture improvement", "Federal security frameworks", "Zero Trust architecture" ], "skillCount" : 15, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 741.9874, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.97 }, { "id" : "6a306007f292fd229cf84717", "title" : "Senior Cybersecurity Architect, Agentic SOC Modernization & AI-Enabled Security Operations", "company" : "West Monroe", "industry" : "Consulting", "salary" : { "min" : 175000.0, "max" : 235000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Cybersecurity Architect in Chicago, adjusted for consulting industry and company size." }, "location" : "Chicago", "locations" : [ "Chicago" ], "timestamp" : "2026-06-16T07:56:39.509", "fingerprint" : "ab387c4d64a3ce082a317119b2be3b51c9ac3e53ea31f335784ed94a6321331b", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://westmonroe.com/careers/job-details-experienced-professionals?gh_jid=6018677004", "externalId" : "6018677004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Chicago", "state" : "Illinois", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.8755616,-87.6244212" } ], "locationText" : "Chicago, Illinois, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cybersecurity, Cloud security, Security operations, AI, Machine Learning", "professionalSkills" : [ "Architecture design", "Solution development", "Technical leadership", "Stakeholder management" ], "hardSkillsList" : [ "Security architecture", "Security operations", "AI implementation" ], "hardSkills" : [ { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "AI implementation", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity architecture, Agentic SOC, AI-enabled security", "majorSkillsList" : [ "Cybersecurity architecture", "Agentic SOC", "AI-enabled security" ], "coreResponsibilities" : "Design and implement agentic SOC modernization strategies, Develop and deploy AI-enabled security operations capabilities, Provide technical leadership for security modernization initiatives, Collaborate with clients to understand their security challenges, Develop architectural blueprints for next-generation security operations, Evaluate and integrate emerging security technologies, Ensure security solutions align with business objectives, Mentor junior security architects and engineers", "teamCollaboration" : "Cross-functional teams; Client stakeholders", "domainKnowledge" : "Agentic SOC; AI-enabled security; Security modernization; Cloud security architecture", "domainList" : [ "agentic-soc", "ai-enabled-security", "security-modernization", "cloud-security-architecture" ], "domainSpecificKnowledge" : [ "Agentic SOC", "AI-enabled security", "Security modernization", "Cloud security architecture" ], "communicationSkills" : "Client presentations; Technical documentation", "documentationSkills" : "Architecture diagrams; Technical specifications", "innovationCreativity" : "Develop innovative solutions; Explore new technologies", "problemSolvingSkills" : "Complex problem solving; Root cause analysis", "outcomesObjectives" : "Modernize SOC capabilities; Enhance security operations efficiency; Implement AI-driven security solutions", "qualificationsBasic" : "5+ years of experience in cybersecurity architecture, Experience with cloud security, Experience with security operations, Experience with agentic security solutions, Experience with AI-enabled security operations", "qualificationsPreferred" : "Experience with large-scale enterprise environments, Experience with modernization initiatives", "workSiteFlexibility" : "Remote", "rawDescription" : "Are you ready to make an impact? West Monroe is seeking a Senior Cybersecurity Architect, Agentic SOC Modernization & AI-Enabled Security Operations to join our Cybersecurity & Enterprise Technology practice. This role is focused on helping clients modernize security operations by designing next-generation SOC capabilities that leverage automation, AI-enabled workflows, agentic security operations, advanced analytics, SIEM/SOAR platforms, threat intelligence, and scalable detection and response processes. You will help clients move beyond traditional, manually intensive SOC models toward more intelligent, automated, and resilient security operations. This includes assessing current-state SOC capabilities, rationalizing fragmented tooling, designing future-state operating models, defining agent-assisted workflows, improving detection engineering, automating investigation and response processes, and enabling measurable improvements in analyst productivity, detection coverage, and response effectiveness. You will serve as a trusted advisor to CIOs, CISOs, security operations leaders, technology executives, and cyber defense teams as they transform fragmented security operations into scalable, intelligence-driven, AI-enabled, and human-governed SOC capabilities. While this role will support clients across industries, there is a strong preference for candidates with experience modernizing SOC capabilities for Energy & Utilities clients, including electric, gas, water, and other critical infrastructure environments. Experience supporting Financial Services, Healthcare, Private Equity, and other highly regulated sectors is also valuable where security operations, regulatory requirements, operational resilience, and risk reduction are critical. Experience with Google Security Operations / Google SecOps is a plus, but this role is intended to be broader than any single platform. The ideal candidate understands how to design modern SOC capabilities across people, process, data, governance, automation, AI, and technology. What You’ll Do Lead Agentic SOC Modernization Strategy Assess current-state security operations capabilities across people, process, technology, data, governance, automation, and operating model dimensions. Define future-state SOC operating models that incorporate AI-assisted investigation, agentic workflows, automated enrichment, response orchestration, human-in-the-loop decisioning, and continuous improvement. Develop SOC modernization roadmaps aligned to business risk, cyber maturity, regulatory obligations, operational resilience goals, staffing models, and technology investments. Identify opportunities to reduce alert fatigue, improve analyst efficiency, accelerate investigation and response, increase detection coverage, and improve the quality of security outcomes. Evaluate where AI agents, automation, analytics, and orchestration can improve SOC workflows without introducing unacceptable operational, privacy, security, or governance risk. Facilitate executive workshops and working sessions with security leadership, infrastructure, cloud, data, application, compliance, risk, and operations stakeholders. Design AI-Enabled and Agentic SOC Capabilities Architect AI-enabled SOC capabilities that support alert triage, evidence gathering, enrichment, summarization, detection authoring, threat hunting, response recommendation, case management, and executive reporting. Define agentic SOC use cases that improve security operations outcomes, including autonomous or semi-autonomous investigation support, alert correlation, threat intelligence enrichment, detection tuning, playbook execution, and analyst decision support. Design human-in-the-loop controls, escalation points, approval gates, logging, monitoring, and quality assurance processes for agentic security operations. Develop operating models for how analysts, engineers, incident responders, threat hunters, SOC managers, and AI-enabled tools work together across the detection and response lifecycle. Advise clients on responsible and secure use of AI in security operations, including access control, data protection, model governance, prompt security, output validation, auditability, and operational risk management. Help clients define practical AI-enabled SOC use cases that improve detection, response, analyst productivity, cyber resilience, and executive visibility. Modernize SIEM, SOAR & Detection Engineering Architect and improve SIEM, SOAR, security analytics, and case management capabilities across platforms such as Splunk, Microsoft Sentinel, Google SecOps, Palo Alto Cortex, ServiceNow SecOps, CrowdStrike, and similar technologies. Build detection engineering strategies aligned to MITRE ATT&CK, threat intelligence, business-critical assets, regulatory priorities, OT/ICS risk scenarios, and client-specific threat models. Design alert triage, enrichment, escalation, case management, automated response, and incident workflow capabilities. Define threat hunting, detection lifecycle management, detection-as-code, tuning, content governance, and use-case performance measurement practices. Establish SOC metrics and KPIs, including mean time to detect, mean time to respond, alert quality, false positive reduction, automation rates, detection coverage, analyst productivity, and operational resilience. Develop implementation roadmaps that sequence telemetry onboarding, detection use cases, automation opportunities, workflow changes, analyst enablement, and operational adoption. Rationalize Security Tooling, Telemetry & Data Sources Evaluate security tool portfolios to identify overlapping capabilities, integration gaps, consolidation opportunities, and replace/retain decisions. Assess SIEM, SOAR, XDR, EDR, threat intelligence, vulnerability management, cloud security, identity, ticketing, and workflow platforms to determine how they support future-state SOC capabilities. Define ingestion strategies for enterprise telemetry, cloud logs, endpoint data, identity data, network data, SaaS platforms, vulnerability data, application logs, OT/ICS data, and third-party security sources. Design normalized data models, parsing strategies, correlation logic, enrichment pipelines, analytics workflows, reporting capabilities, and evidence collection processes. Develop cost, capability, integration, and operational impact analyses to support security tool modernization decisions. Partner with technology, procurement, finance, security, and risk stakeholders to build actionable tooling roadmaps aligned to renewal windows, architecture dependencies, budget constraints, and business priorities. Integrate enterprise and OT telemetry into unified SOC monitoring and response environments where applicable. Strengthen SOC Governance, Risk & Compliance Alignment Align SOC modernization efforts to frameworks and regulatory requirements such as NIST CSF, NIST 800-53, ISO 27001, NERC CIP, IEC 62443, HIPAA, GLBA, PCI DSS, and other industry-specific obligations. Design control validation, audit readiness, evidence collection, logging, monitoring, and reporting capabilities within security operations workflows. Ensure security monitoring, detection, response, and logging strategies support compliance, resilience, cyber risk management, and executive reporting objectives. Define governance models for detection content ownership, playbook approval, automation changes, AI-enabled workflows, exception management, escalation paths, and continuous improvement. Translate complex technical recommendations into executive-level narratives focused on business risk, operational resilience, investment priorities, and measurable outcomes. Support Google SecOps and Other Modern SOC Platforms Support clients evaluating, designing, or implementing modern SOC platforms, including Google Security Operations / Google SecOps, Splunk, Microsoft Sentinel, Palo Alto Cortex, ServiceNow SecOps, and comparable technologies. Conduct capability assessments, platform fit analyses, and replacement/retain evaluations for legacy SIEM/SOAR and adjacent security tools. Advise clients on migration considerations from legacy SIEM/SOAR platforms to modern SOC platforms while managing continuity, regulatory requirements, operational risk, and analyst adoption. Where applicable, design Google SecOps-enabled capabilities for SIEM, SOAR, threat detection, investigation, response, security analytics, and data ingestion. Define platform implementation roadmaps, including onboarding waves, integration priorities, detection sequencing, automation opportunities, reporting requirements, and operational adoption plans. Drive Client & Practice Impact Serve as a trusted advisor to client executives, security operations leaders, SOC managers, security engineers, and technology stakeholders. Lead architecture workshops, SOC maturity assessments, platform assessments, operating model design, tooling rationalization, and modernization planning engagements. Support proposal development, solution design, estimation, delivery planning, and client presentations. Contribute to West Monroe thought leadership, reference architectures, accelerators, and delivery methods for Agentic SOC modernization, AI-enabled security operations, SIEM/SOAR transformation, detection engineering, and cyber defense modernization. Mentor team members and help grow West Monroe’s capabilities in modern security operations, AI-enabled cyber defense, SOC transformation, and security platform modernization. Leverage AI tools to accelerate analysis, synthesize compleec information and support date-driven recommendations for clients, exercising sound judgment of client outcomes . What You Bring 7–10+ years of experience in security architecture, security operations, SOC modernization, SIEM/SOAR engineering, detection engineering, incident response, security automation, or cybersecurity consulting. Experience designing, implementing, or modernizing SOC capabilities in enterprise, regulated, or critical infrastructure environments. Strong understanding of modern SOC operating models, including detection engineering, alert triage, investigation workflows, threat hunting, incident response, case management, escalation processes, and security operations governance. Experience designing AI-enabled or automation-enabled security operations capabilities, including analyst assist, enrichment, alert summarization, workflow orchestration, response automation, or agentic SOC use cases. Strong understanding of SIEM, SOAR, XDR, security telemetry, log ingestion, data normalization, correlation, enrichment, detection content, case management, and incident response workflows. Experience assessing, rationalizing, and consolidating enterprise cybersecurity tools and developing actionable modernization roadmaps. Familiarity with enterprise security technologies such as EDR/XDR, IAM, PAM, cloud security, network security, vulnerability management, threat intelligence, DLP, ITSM, and SecOps workflow platforms. Experience integrating security data from cloud, endpoint, identity, network, application, SaaS, infrastructure, and third-party sources. Ability to design SOC operating models, analyst workflows, escalation paths, governance processes, control points, and performance metrics. Familiarity with AI-enabled security operations, automation, analytics, responsible AI, and operational governance considerations. Experience with governance, risk, and compliance frameworks such as NIST CSF, NIST 800-53, ISO 27001, NERC CIP, IEC 62443, HIPAA, GLBA, PCI DSS, or related standards. Strong executive communication, stakeholder engagement, facilitation, and consulting skills. Ability to translate business risk and operational objectives into secure, scalable, and practical security operations architectures. Willingness to travel for client engagements. Experience integration AI tools(e.g.,ChatGPT) into day to day workflows to enhance productivity and insight generation, coupled with strong critical thinking to acesss accuracy, mitigate bias, and ensure high-quality outputs. Must be eligible to work in the United States without the need for sponsorship now or in the future Preferred / Plus Qualifications Prior consulting experience in a client-facing advisory or delivery leadership role. Experience with Google Security Operations / Google SecOps, Chronicle SIEM, Chronicle SOAR, Google Cloud security services, BigQuery, data pipelines, or security analytics architectures. Google Security Operations, Google Cloud, or related security certifications. Experience migrating from legacy SIEM/SOAR platforms to Google SecOps, Splunk, Microsoft Sentinel, Palo Alto Cortex, ServiceNow SecOps, or other modern SOC platforms. Experience with platforms such as Splunk, Microsoft Sentinel, Google SecOps, ServiceNow SecOps, Palo Alto Cortex, CrowdStrike, Okta, SailPoint, Mandiant, VirusTotal, Wiz, Prisma Cloud, or similar enterprise security tools. Experience leading or supporting SOC modernization, AI-enabled security operations, SIEM/SOAR transformation, detection engineering, security automation, or security operations improvement programs. Experience supporting Energy & Utilities clients, including electric, gas, water, critical infrastructure environments, or other highly regulated industries such as Financial Services or Healthcare. Experience integrating OT/ICS telemetry or operational security monitoring into enterprise SOC environments. Familiarity with threat intelligence, MITRE ATT&CK, detection-as-code, YARA-L, Sigma, SOAR playbooks, and detection lifecycle management. Familiarity with agentic AI design patterns, autonomous workflow orchestration, AI governance, responsible AI, model risk management, and security controls for AI-enabled cyber defense. Relevant certifications such as CISSP, CISM, CCSP, GSEC, GCIA, GCIH, GCFA, Google Cloud security certifications, or similar credentials. Candidate Profile Summary The ideal candidate is a security operations architect who can operate at both the executive advisory and technical architecture levels. They understand how to assess SOC maturity, rationalize legacy tooling, modernize detection and response capabilities, and design AI-enabled, agent-assisted, and automation-driven security operations. This person should be comfortable helping clients move from fragmented, manual, and platform-centric SOC models toward integrated, intelligence-driven, human-governed, and agentic SOC capabilities. They can define practical use cases, design operating models, guide platform modernization, improve detection engineering, and translate technical security operations improvements into measurable business risk reduction. Experience with Google SecOps is valuable and preferred, but the broader need is for someone who can design and lead SOC modernization across platforms, operating models, telemetry strategies, automation, AI-enabled workflows, governance, and client-specific risk priorities. job description here Based on pay transparency guidelines, the salary range for this role can vary based on your proximity to one of our West Monroe offices (see table below). Information on our competitive total rewards package, including our bonus structure and benefits is here. Individual salaries are determined by evaluating a variety of factors including geography, experience, skills, education, and internal equity. Employees (and their families) are covered by medical, dental, vision, and basic life insurance. Employees are able to enroll in our company’s 401k plan, purchase shares from our employee stock ownership program and be eligible to receive annual bonuses. Employees will also receive unlimited flexible time off and ten paid holidays throughout the calendar year. Eligibility for ten weeks of paid parental leave will also be available upon hire date. Seattle or Washington, D. C. $203,200—$239,100 USD Los Angeles $212,900—$250,500 USD New York City or San Francisco $222,500—$261,900 USD A location not listed above $193,500—$227,700 USD Other consultancies talk at you. At West Monroe, we work with you. We’re a global business and technology consulting firm passionate about creating measurable value for our clients, delivering real-world solutions. The combination of business and technology is not new, but how we bring them together is unique. We’re fluent in both. We know that technology alone is not the answer, but how we apply it is. We rely on data to constantly adapt and solve new challenges. Actions that work today with outcomes that generate value for years to come. At West Monroe, we zero in on the heart of the opportunity, getting to results faster and preparing people for what’s next. You’ll feel the difference in how we work. We show up personally. We’re right there in the room with you, co-creating through the challenges. With West Monroe, collaboration isn’t a lofty promise, but a daily action. We work together with you to turn vision into clear action with lasting impact. West Monroe is an Equal Employment Opportunity Employer  We believe in treating each employee and applicant for employment fairly and with dignity. We base our employment decisions on merit, experience, and potential, without regard to race, color, national origin, sex, sexual orientation, gender identity, marital status, age, religion, disability, veteran status, or any other characteristic prohibited by federal, state or local law. To learn more about diversity, equity and inclusion at West Monroe, visit www.westmonroe.com/inclusion. If you require a reasonable accommodation to participate in our recruiting process, please inquire by sending an email to recruiting@westmonroe.com. Please review our current policy regarding use of generative artificial intelligence during the application process. If you are based in California, we encourage you to read West Monroe’s Notice at Collection for California residents, provided pursuant to the California Consumer Privacy Act (CCPA) and linked here. ", "summaryDescription" : "Senior Cybersecurity Architect, Agentic SOC Modernization & AI-Enabled Security Operations at West Monroe. Skills: Cybersecurity architecture, Agentic SOC, AI-enabled security. Design and implement agentic SOC modernization strategies. Develop and deploy AI-enabled security operations capabilities", "postedDate" : "2026-06-15T23:21:54.794", "createdAt" : "2026-06-15T23:21:54.794", "lastUpdated" : "2026-06-16T07:56:39.509", "ingestTimestamp" : "2026-06-15T23:21:54.794", "mongoId" : "6a306007f292fd229cf84717", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 235000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security architecture", "Security operations", "AI implementation", "Cybersecurity architecture", "Agentic SOC", "AI-enabled security", "Architecture design", "Solution development", "Technical leadership", "Stakeholder management", "Security modernization", "Cloud security architecture" ], "skillCount" : 12, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 731.40814, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Consulting", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2c7ecc74d8ee00a0953abd", "title" : "Senior Information Security Engineer, Offensive Security", "company" : "GRVTY", "industry" : "Cybersecurity", "salary" : { "min" : 145000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Information Security Engineer, Offensive Security in San Antonio, United States, adjusted for industry and seniority." }, "location" : "San Antonio, Texas, United States", "locations" : [ "San Antonio", "Texas", "United States" ], "certifications" : [ "OSCP", "GXPN" ], "timestamp" : "2026-06-15T09:25:56.286", "fingerprint" : "7487bf9525ccff18188807f59ce14d998d386e4c9c57a6ac9829c604a548adc2", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/grvty/jobs/4282091009", "externalId" : "4282091009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Antonio", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "29.4246002,-98.4951405" } ], "locationText" : "San Antonio, Texas, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "UNIX/Linux, Windows, Network protocols, Packet analysis", "professionalSkills" : [ "Security assessments", "Red team operations", "Network exploitation", "Malware analysis", "Security tools evaluation" ], "hardSkillsList" : [ "Offensive cyber operations", "Penetration testing" ], "hardSkills" : [ { "name" : "Offensive cyber operations", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" } ], "majorSkills" : "Offensive Security, Network Exploitation, Red Teaming", "majorSkillsList" : [ "Offensive Security", "Network Exploitation", "Red Teaming" ], "coreResponsibilities" : "Execute offensive cyber operations, Assess client networks, Identify vulnerabilities, Analyze computer networks, Analyze systems, Assess security weaknesses, Perform analysis of malware, Evaluate capabilities of security tools, Provide written briefings, Provide oral briefings, Train junior operators, Mentor junior operators, Develop scripts, Develop tools", "domainKnowledge" : "Offensive cyber operations", "domainList" : [ "offensive-cyber-operations" ], "domainSpecificKnowledge" : [ "Offensive cyber operations" ], "communicationSkills" : "Written briefings; Oral briefings", "specialRequirements" : "Active TS/SCI with poly, US citizenship required", "qualificationsBasic" : "Active TS/SCI with poly, US citizenship required, Bachelor Degree in Computer Science or related field or 5 years of direct work experience, Minimum of 3 years of related work experience, Completion of formal offensive cyber operations training, Experience conducting network exploitation, penetration testing, or red team operations, Proficiency with UNIX/Linux and Windows operating systems, Understanding of network protocols and packet analysis", "qualificationsPreferred" : "Active TS/SCI with poly, Advanced operator certifications or specialized training, OSCP, GXPN, or similar offensive security certifications, Experience with reverse engineering and exploit development, Background in offensive cyber operations or advanced red teaming", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "What Impact You'll Have Seeking experienced offensive security professionals to conduct security assessments, red team operations, and network exploitation activities in support of client security requirements. What You'll be Owning Execute offensive cyber operations to assess client networks and identify vulnerabilities Analyze computer networks and systems to identify and assess security weaknesses Perform analysis of malware and security tools to evaluate capabilities Provide written and oral briefings on assessment results to clients and management Train and mentor junior operators on tools, techniques, and tradecraft Develop scripts and tools to improve operational efficiency What You Must Have Must be able to obtain and maintain an Active TS/SCI with poly, US citizenship required Bachelor Degree in Computer Science or related field is required or 5 years of direct work experience Minimum of 3 years of related work experience is required Completion of formal offensive cyber operations training Experience conducting network exploitation, penetration testing, or red team operations Proficiency with UNIX/Linux and Windows operating systems Strong understanding of network protocols and packet analysis What Would be Nice to Have Active TS/SCI with poly Advanced operator certifications or specialized training OSCP, GXPN, or similar offensive security certifications Experience with reverse engineering and exploit development Background in offensive cyber operations or advanced red teaming Why Choose GRVTY The toughest national security challenges demand vision and ingenuity, not just resources. We deliver mission and technical expertise to outpace our adversaries. We’re purpose-built to tackle the most entrenched, systemic national security issues around the world. We partner with our customers to help them overcome challenges in every corner of technology and defense—including the ones still being explored. Our growing capabilities create complementary advantages, giving on-the-ground operations the edge they need to succeed. We muster everything we have to answer every challenge presented, every day of our lives. At GRVTY, we believe that when our employees thrive, our company thrives. That’s why we offer a comprehensive and competitive benefits package designed to support your well-being, growth, and work-life balance. • Robust health plan including medical, dental, and vision • Health Savings Account with company contribution • Annual Paid Time Off and Paid Holidays • Paid Parental Leave • 401k with generous company match • Training and Development Opportunities • Award Programs • Variety of Company Sponsored Events EEO Statement GRVTY, is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran and will not be discriminated against on the basis of disability. Anyone requiring reasonable accommodations should email recruiting@grvty.com or call 703-544-7930 with requested details.  A member of the HR team will respond to your request within 2 business days.  Know Your Rights: Workplace Discrimination is Illegal (eeoc.gov)  Please review our current job openings and apply for the positions you believe may be a fit. If you are not an immediate fit, we will also keep your resume in our database for future opportunities.", "summaryDescription" : "Senior Information Security Engineer, Offensive Security at GRVTY. Skills: Offensive Security, Network Exploitation, Red Teaming. Execute offensive cyber operations. Assess client networks", "postedDate" : "2026-06-14T05:42:02.489", "createdAt" : "2026-06-14T05:42:02.489", "lastUpdated" : "2026-06-15T09:25:56.286", "ingestTimestamp" : "2026-06-14T05:42:02.489", "mongoId" : "6a2c7ecc74d8ee00a0953abd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Offensive cyber operations", "Penetration testing", "Offensive Security", "Network Exploitation", "Red Teaming", "Security assessments", "Red team operations", "Network exploitation", "Malware analysis", "Security tools evaluation", "OSCP", "GXPN" ], "skillCount" : 12, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 729.6582, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2cdf0b74d8ee00a0a59bfa", "title" : "Information Assurance Specialist III", "industry" : "Cybersecurity", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Assurance Specialist III in Bethesda, USA, adjusted for senior-level experience and government industry." }, "location" : "Bethesda, MD", "locations" : [ "Bethesda, MD" ], "certifications" : [ "CISSP", "CISM", "CompTIA Security+" ], "timestamp" : "2026-06-15T06:43:05.872", "fingerprint" : "eda8b53f80dcba15cb0a82bd62cc4df4e15a443488c27b80bb46d8bdc1642af3", "source" : "jazzhr", "language" : "en", "externalId" : "5O6vdoc94W", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bethesda", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9812726,-77.1233587" } ], "locationText" : "Bethesda, Maryland, United States", "technicalSkills" : "Information Assurance, Cybersecurity, Risk Management, Security Controls, System Security, Network Security, Vulnerability Management, Incident Response, Security Audits, Compliance, NIST, RMF", "professionalSkills" : [ "System analysis", "Policy development", "Risk assessment" ], "hardSkillsList" : [ "Security auditing", "Risk assessment", "Vulnerability assessment" ], "hardSkills" : [ { "name" : "Security auditing", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" } ], "majorSkills" : "Information Assurance, Cybersecurity, Risk Management", "majorSkillsList" : [ "Information Assurance", "Cybersecurity", "Risk Management" ], "coreResponsibilities" : "Develop and implement security policies, Conduct security assessments, Monitor security systems, Respond to security incidents, Ensure compliance with regulations, Provide security awareness training, Manage security controls, Perform vulnerability assessments", "teamCollaboration" : "Cross-functional teams; IT department", "domainKnowledge" : "Information Assurance; Cybersecurity principles; NIST SP 800-53; Risk Management Framework (RMF)", "domainList" : [ "information-assurance", "cybersecurity-principles", "nist-sp-800-53", "risk-management-framework-rmf" ], "domainSpecificKnowledge" : [ "Information Assurance", "Cybersecurity principles", "NIST SP 800-53", "Risk Management Framework (RMF)" ], "communicationSkills" : "Technical writing; Presentations", "documentationSkills" : "Security documentation; Policy documentation", "continuousLearning" : "Professional development; Training opportunities", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "specialRequirements" : "Security clearance", "outcomesObjectives" : "Maintain security posture; Reduce security risks; Ensure regulatory compliance", "qualificationsBasic" : "5+ years experience, Bachelor's degree", "workSiteFlexibility" : "Onsite", "summaryDescription" : "Information Assurance Specialist III. Skills: Information Assurance, Cybersecurity, Risk Management. Develop and implement security policies. Conduct security assessments", "createdAt" : "2026-06-14T00:20:05.756", "lastUpdated" : "2026-06-15T06:43:05.872", "ingestTimestamp" : "2026-06-14T00:20:05.756", "mongoId" : "6a2cdf0b74d8ee00a0a59bfa", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security auditing", "Risk assessment", "Vulnerability assessment", "Information Assurance", "Cybersecurity", "Risk Management", "System analysis", "Policy development", "Cybersecurity principles", "NIST SP 800-53", "Risk Management Framework (RMF)", "CISSP", "CISM", "CompTIA Security+" ], "skillCount" : 14, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.44444445, "_score" : 729.26776, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c95e474d8ee00a098e230", "title" : "Sr. Director, Information Security & Cloud Operations", "company" : "Prolaio", "industry" : "Healthcare", "salary" : { "min" : 231000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Chicago, Illinois, United States", "locations" : [ "Chicago", "Illinois", "United States" ], "timestamp" : "2026-06-16T01:46:02.394", "fingerprint" : "80b72dc83ef8484c487a81518487781a6967ed292e1dfb1531b166435be40989", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/prolaio/jobs/5251462008", "externalId" : "5251462008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Chicago", "state" : "Illinois", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.8755616,-87.6244212" } ], "locationText" : "Chicago, Illinois, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Director", "technicalSkills" : "GCP, AWS, Azure, Kubernetes, Containers, Microservices, Serverless architecture, Infrastructure-as-code, Vector databases", "professionalSkills" : [ "Risk management", "Data governance", "Access control", "Incident response", "Vendor management", "Cost efficiency" ], "hardSkillsList" : [ "Security strategy", "Compliance framework", "Automated controls testing", "Vulnerability management", "Data protection", "Endpoint security", "Threat modeling", "Model lifecycle management", "AI model validation", "Ethical AI use", "Secure AI use", "Zero trust networking", "AI infrastructure security" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security strategy", "level" : "intermediate" }, { "name" : "Compliance framework", "level" : "intermediate" }, { "name" : "Automated controls testing", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Data protection", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Model lifecycle management", "level" : "intermediate" }, { "name" : "AI model validation", "level" : "intermediate" }, { "name" : "Ethical AI use", "level" : "intermediate" }, { "name" : "Secure AI use", "level" : "intermediate" }, { "name" : "Zero trust networking", "level" : "intermediate" }, { "name" : "AI infrastructure security", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Information Security, Cloud Operations, DevSecOps, AI Security", "majorSkillsList" : [ "Information Security", "Cloud Operations", "DevSecOps", "AI Security" ], "coreResponsibilities" : "Define enterprise information security strategy, Execute enterprise information security strategy, Establish security policies, Maintain security policies, Establish security standards, Maintain security standards, Establish security procedures, Maintain security procedures, Lead design of continuous security framework, Lead implementation of continuous security framework, Lead design of continuous compliance framework, Lead implementation of continuous compliance framework, Architect pipelines for continuous monitoring, Operationalize pipelines for continuous monitoring, Own cybersecurity program, Collaborate with AI teams, Collaborate with product engineering teams, Defend against AI-specific threats, Lead architecture of cloud infrastructure, Lead deployment of cloud infrastructure, Lead operation of cloud infrastructure, Partner with CDAO, Partner with AI engineering teams, Define policies for training data governance, Enforce policies for training data governance, Define policies for AI model lifecycle management, Enforce policies for AI model lifecycle management, Define policies for AI model validation, Enforce policies for AI model validation, Define policies for ethical AI use, Enforce policies for ethical AI use, Define policies for secure AI use, Enforce policies for secure AI use, Define vendor SLAs, Monitor vendor SLAs, Define vendor DPAs, Monitor vendor DPAs, Define shared responsibility models, Monitor shared responsibility models, Foster culture of innovation, Foster culture of experimentation, Foster culture of learning, Maintain ownership boundaries, Maintain collaboration models", "teamCollaboration" : "Cross-functional teams; CIO; CDAO; CPO; Engineering; Operations", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "HITRUST; ISO 27001; ISO 42001; HIPAA; FDA; 21 CFR Part 11; GxP; CSV; CSA; Data privacy; Healthcare; Biotech; Medtech; Regulated environments; AI-driven healthcare; Precision cardiology; Clinical innovation; Decentralized clinical solutions; AI-based systems; Validated production environment", "domainList" : [ "hitrust", "iso-27001", "iso-42001", "hipaa", "fda", "21-cfr-part-11", "gxp", "csv", "csa", "data-privacy", "healthcare", "biotech", "medtech", "regulated-environments", "ai-driven-healthcare", "precision-cardiology", "clinical-innovation", "decentralized-clinical-solutions", "ai-based-systems", "validated-production-environment" ], "domainSpecificKnowledge" : [ "HITRUST", "ISO 27001", "ISO 42001", "HIPAA", "FDA", "21 CFR Part 11", "GxP", "CSV", "CSA", "Data privacy", "Healthcare", "Biotech", "Medtech", "Regulated environments", "AI-driven healthcare", "Precision cardiology", "Clinical innovation", "Decentralized clinical solutions", "AI-based systems", "Validated production environment" ], "toolProficiency" : [ "GRC tooling" ], "communicationSkills" : "Business-relevant narratives", "documentationSkills" : "Security documentation; Policy documentation", "continuousLearning" : "Continuous learning", "innovationCreativity" : "Innovation; Experimentation", "problemSolvingSkills" : "Risk assessment; Troubleshooting", "outcomesObjectives" : "Earn regulator trust; Earn customer trust; Fuel Prolaio's growth", "qualificationsBasic" : "Bachelor’s degree in computer science, Engineering, Information Security, Information Systems, or related field, At least 15 years of experience in healthcare, biotech, medtech, or other regulated healthcare environments, At least 5 years of experience serving as a Sr. Director of Information Security and Cloud Operations, FDA regulatory requirements", "qualificationsPreferred" : "Experience using AI to support security documentation, Experience using AI to support vendor assessments, Experience using AI to support policy oversight, Experience using AI to support internal audits", "rawDescription" : "Who Are We? Prolaio believes that continuous learning and collaboration can make a significant difference in how heart care is administered. We are creating smarter ways to address heart disease and heart risks by uniting patients, care teams, and researchers on a secure, technology-enabled platform that drives clinical innovation and offers a path towards better patient outcomes. This is precision cardiology, and we know it’s within reach. What Will You Do? The Overview The Sr. Director, Information security & Cloud Operations will be the senior leader shaping how Prolaio secures its AI‑driven, cloud‑first healthcare platform, owning the information security and cloud infrastructure strategy that underpins every product, trial, and patient interaction. This role designs and operates a continuous security and continuous compliance model that keeps Prolaio ahead of HITRUST, ISO 27001, ISO 42001, HIPAA, and FDA expectations, while still enabling the speed and flexibility required to innovate in AI‑powered products and decentralized clinical solutions. This is a role for an innovative security and cloud leader who prefers modern DevSecOps, security as code, and AI native approaches over purely policy driven models, using smart guardrails to manage risk, earn regulator and customer trust, and fuel Prolaio’s growth. The Specifics Define and execute Prolaio’s enterprise information security strategy, aligned with Prolaio’s business goals, clinical programs, and AI product roadmap. Establish and maintain security policies, standards, and procedures covering access control, data governance, cryptography, incident response, and IT/clinical risk management with a focus on continuous improvement Lead the design and implementation of a continuous security and continuous compliance framework (e.g., security-as-code, compliance-as-code, automated controls testing) to support HITRUST, ISO 27001, ISO 42001, HIPAA, FDA, 21 CFR Part 11, GxP/CSV/CSA, and data privacy requirements. Architect and operationalize pipelines for continuous monitoring of security controls, configuration drift, vulnerabilities, and compliance posture across cloud, on-prem, and edge environments. Own the enterprise cybersecurity program, including threat modeling, vulnerability management, identity and access management, data protection, endpoint security, and incident response. Collaborate with AI and product engineering teams to defend against AI-specific threats such as model extraction, prompt injection, model poisoning, data leakage, and abuse of AI-generated content. Lead the architecture, deployment, and operation of Prolaio’s cloud infrastructure (e.g., GCP) to ensure high availability, scalability, and cost efficiency for clinical, operational, and AI workloads. Partner with the CDAO and AI engineering teams to define and enforce policies for training data governance, model lifecycle management, AI model validation, and ethical/secure use of AI. Define and monitor vendor SLAs, DPAs, and shared responsibility models, ensuring vendors support Prolaio’s certification goals and regulatory obligations. Foster a culture of innovation, experimentation, and learning within the security and cloud organization, balancing risk management with enabling rapid product delivery and AI-driven capabilities. Maintain clear ownership boundaries and collaboration models with the CIO (enterprise IT), CDAO (data & analytics), CPO/Engineering (product software), and Operations (Clinical and Supply Chain) to ensure coherent architecture and governance. Why Prolaio? Impactful Work: You will join in the fight against heart failure (HF) and hypertrophic cardiomyopathy (HCM) with the goal of extending and saving the lives of our patients while also being at the forefront of changing the healthcare industry through technology. Innovative Environment: You will be part of an organization doing something that’s never been done before. Professional Growth: You will join a growing team and have a substantial impact on our daily and future operations with the opportunity to continuously learn and grow. Collaborative Team: You will be part of a team of collaborative, curious, and committed individuals focused on the collective good, inclusiveness, scientific excellence, and advancing digital health for cardiology. Who You Are? Bachelor’s degree in computer science, Engineering, Information Security, Information Systems, or related field. At least 15 years of experience in healthcare, biotech, medtech, or other regulated healthcare environments, with direct responsibility for information security in complex, multi-stakeholder settings. At least 5 years of experience serving as a Sr. Director of Information Security and Cloud Operations, or equivalent senior leadership role accountable for enterprise security and cloud operations in regulated environments in healthcare. Demonstrated experience designing and operating information security programs that support or achieve HITRUST, ISO 27001, and related certifications, as well as HIPAA and FDA regulatory requirements. Proven track record designing and implementing continuous security and compliance frameworks (for example security-as-code, automated controls testing, integrated GRC tooling) in cloud-native environments, including using AI to support security documentation, vendor assessments, policy oversight, and internal audits. Strong expertise in modern cloud architectures and operations (AWS/Azure/GCP), including infrastructure-as-code, Kubernetes/containers, microservices, serverless architecture, zero trust networking, and observability. Demonstrated experience building and securing AI and data infrastructure (e.g., GPU clusters, vector databases, AI model serving, data lakes) and supporting AI/ML workloads in validated production environment. Deep understanding of HIPAA, 21 CFR Part 11, GxP/CSV/CSA, data privacy laws, and security requirements applicable to healthcare, clinical trials, and AI-based systems Excellent communication skills, with the ability to translate complex security and technical concepts into clear, business-relevant narratives for executives, regulators, and partners. Why You’ll Love Working Here Meaningful Compensation: Competitive salary, performance bonus, and equity so you can share in what we build. Great Health Coverage: Medical, dental, and vision plans with multiple options and strong company contributions. Flexible Spending Perks: HSA, FSA, commuter benefits, and a $1,200 annual Lifestyle Spending Account to support wellness, commuting, family needs, and more. Time to Recharge: Generous paid time off, sick leave, and company holidays. Family-First Benefits: Paid parental leave, caregiver leave, and support for growing families. Security & Peace of Mind: Company-paid life insurance and short- and long-term disability coverage. Plan for the Future: 401(k) plan to help you build long-term financial security. Care When You Need It: Easy access to telehealth and optional supplemental coverage for life’s unexpected moments. Starting Salary is at $231,000.00 (Exact Compensation may vary based on skills, experience, and location)", "summaryDescription" : "Sr. Director, Information Security & Cloud Operations at Prolaio. Skills: Information Security, Cloud Operations, DevSecOps, AI Security. Define enterprise information security strategy. Execute enterprise information security strategy", "postedDate" : "2026-06-14T20:10:01.529", "createdAt" : "2026-06-14T20:10:01.529", "lastUpdated" : "2026-06-16T01:46:02.394", "ingestTimestamp" : "2026-06-14T20:10:01.529", "mongoId" : "6a2c95e474d8ee00a098e230", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 231000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security strategy", "Compliance framework", "Automated controls testing", "Vulnerability management", "Data protection", "Endpoint security", "Threat modeling", "Model lifecycle management", "AI model validation", "Ethical AI use", "Secure AI use", "Zero trust networking", "AI infrastructure security", "Leadership", "Information Security", "Cloud Operations", "DevSecOps", "AI Security", "Risk management", "Data governance", "Access control", "Incident response", "Vendor management", "Cost efficiency", "Roadmap planning", "HITRUST", "ISO 27001", "ISO 42001", "HIPAA", "FDA", "21 CFR Part 11", "GxP", "CSV", "CSA", "Data privacy", "Healthcare", "Biotech", "Medtech", "Regulated environments", "AI-driven healthcare", "Precision cardiology", "Clinical innovation", "Decentralized clinical solutions", "AI-based systems", "Validated production environment", "GRC tooling" ], "skillCount" : 46, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 1.0, "_score" : 729.08936, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6c3174d8ee00a09176d2", "title" : "Information Security & Compliance Officer", "company" : "Herotel", "industry" : "Cybersecurity", "salary" : { "min" : 550000.0, "max" : 850000.0, "currency" : "ZAR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Information Security & Compliance Officer in the Technology industry in Plattekloof, South Africa, adjusted for company size and full-time employment." }, "location" : "Plattekloof, ZA", "locations" : [ "Plattekloof", "ZA" ], "timestamp" : "2026-06-16T02:25:52.431", "fingerprint" : "d132db59283ed0e6b6644dbc877ef8326399220a31df34044b874d29a3f4c08a", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://herotel-5f74feffb7e1.breezy.hr/p/8fdeb6bfb377-information-security-compliance-officer", "externalId" : "8fdeb6bfb377", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Plattekloof", "country" : "South Africa", "continent" : "af", "source" : "llm", "workMode" : "onsite", "geo" : "-33.8775000,18.5855556" } ], "locationText" : "Plattekloof, South Africa", "employmentType" : "FULL_TIME", "coreResponsibilities" : "Take ownership of safeguarding Herotel’s digital environment", "rawDescription" : "Are you passionate about cybersecurity, threat detection, and protecting critical business systems? Join our IT team as an Information Security & Compliance Officer in Plattekloof and take ownership of safeguarding Herotel’s digital environment across our national footprint. The key purpose of", "summaryDescription" : "Information Security & Compliance Officer at Herotel. Take ownership of safeguarding Herotel’s digital environment", "createdAt" : "2026-06-14T18:55:42.519", "lastUpdated" : "2026-06-16T02:25:52.431", "ingestTimestamp" : "2026-06-14T18:55:42.519", "mongoId" : "6a2c6c3174d8ee00a09176d2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 727.2099, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca36a74d8ee00a09aba74", "title" : "Sr. Security Engineer, Corporate Information Security", "company" : "Betterment", "industry" : "FinTech", "salary" : { "min" : 175000.0, "max" : 235000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in New York, adjusted for the FinTech industry and company size." }, "location" : "61 West 23rd Street, Fifth Floor, New York, New York", "locations" : [ "61 West 23rd Street", "Fifth Floor", "New York", "New York" ], "timestamp" : "2026-06-15T09:22:09.285", "fingerprint" : "72c875a3162a4c2e09d8c8dc48b7c153e2abafe284223ef079d06afa2c355b42", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.betterment.com/careers/current-openings/job?gh_jid=7979278&gh_jid=7979278", "externalId" : "7979278", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Go, Okta, Google Workspace, Slack, Atlassian, Glean, Jamf, SaaS, Windows, Linux, MacOS, Mobile, Managed browser, Workstation, AI Governance, CIS benchmarks, ACLs, Firewall rules, Cryptography, VPNs, Tunneling, Encapsulation", "professionalSkills" : [ "Identity architecture", "Access controls", "Endpoint hardening", "Risk reduction", "Business enablement", "Network monitoring", "Automation" ], "hardSkillsList" : [ "Vulnerability management", "Security automation", "Network monitoring", "ACLs", "Firewall rules", "Cryptography", "VPNs", "Tunneling", "Encapsulation" ], "softSkillsList" : [ "AI fluency" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Network monitoring", "level" : "intermediate" }, { "name" : "ACLs", "level" : "intermediate" }, { "name" : "Firewall rules", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "VPNs", "level" : "intermediate" }, { "name" : "Tunneling", "level" : "intermediate" }, { "name" : "Encapsulation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "AI fluency" } ], "majorSkills" : "Identity architecture, Access controls, Endpoint hardening, Workforce security", "majorSkillsList" : [ "Identity architecture", "Access controls", "Endpoint hardening", "Workforce security" ], "coreResponsibilities" : "Design identity architecture, Implement identity architecture, Improve identity architecture, Design privileged access controls, Implement privileged access controls, Improve privileged access controls, Design endpoint hardening standards, Implement endpoint hardening standards, Improve endpoint hardening standards, Improve workforce security posture, Embed secure access patterns, Partner with Security teams, Partner with IT, Partner with Legal, Partner with Compliance, Partner with business units, Operationalize CIS benchmarks, Extend security to mobile, Extend security to managed browser", "teamCollaboration" : "Cross-functional teams; Security teams; IT; Legal; Compliance; Business units", "domainKnowledge" : "Workforce security; Identity management; Logical access; Change management; SaaS security; Endpoint security; Mobile security; Managed browser security; Workstation security; AI Governance; CIS benchmarks; SOC 2; ISO 27001; NIST; Enterprise network; Privileged Access Management; Identity Governance", "domainList" : [ "workforce-security", "identity-management", "logical-access", "change-management", "saas-security", "endpoint-security", "mobile-security", "managed-browser-security", "workstation-security", "ai-governance", "cis-benchmarks", "soc-2", "iso-27001", "nist", "enterprise-network", "privileged-access-management", "identity-governance" ], "domainSpecificKnowledge" : [ "Workforce security", "Identity management", "Logical access", "Change management", "SaaS security", "Endpoint security", "Mobile security", "Managed browser security", "Workstation security", "AI Governance", "CIS benchmarks", "SOC 2", "ISO 27001", "NIST", "Enterprise network", "Privileged Access Management", "Identity Governance" ], "toolProficiency" : [ "Okta", "Google Workspace", "Slack", "Atlassian", "Glean", "Jamf", "CyberArk", "BeyondTrust", "Delinea" ], "communicationSkills" : "Writing RFCs; Writing one-pagers; Writing audit narratives", "documentationSkills" : "Technical writing; Audit narratives", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "qualificationsBasic" : "5+ years Python, Experience with Okta, Experience with Google Workspace, Experience with Slack, Experience with Atlassian, Experience with Glean, Experience with Jamf, Experience with SaaS portfolio, Experience with Windows, Experience with Linux, Experience with macOS, Experience with mobile, Experience with managed browser, Experience with workstation environments, Experience with AI Governance, Experience with CIS benchmarks, Experience with RFCs, Experience with one-pagers, Experience with audit narratives, Experience with SOC 2, Experience with ISO 27001, Experience with NIST, Experience with network monitoring, Experience with ACLs, Experience with firewall rules, Experience with cryptography, Experience with VPNs, Experience with tunneling, Experience with encapsulation", "qualificationsPreferred" : "Privileged Access Management experience, Identity Governance experience, Cloud security experience, Endpoint security experience, Vulnerability management experience, Security automation experience, AI fluency", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Betterment Betterment is a leading, technology-driven financial services company that offers investing, savings and retirement solutions for retail investors and investment advisors as well as financial wellness solutions, including a 401(k) for small and medium-sized businesses. Our team is passionate about our mission, to empower people to build wealth with confidence and ease. We're headquartered in NYC and offer hybrid NY-based positions (four days/week in-office, with no required office days during the summer and winter holidays). About the Role Betterment is hiring a Sr. Security Engineer, Corporate Information Security to be a principal member of the Workforce Security team. We're responsible for managing identity and logical access across the company, owning change management for the systems employees and contractors rely on every day, and operating the technologies that secure them: Okta, Google Workspace, Slack, Atlassian, Glean, Jamf, and the SaaS portfolio that surrounds them. As we extend centralized management to a small Windows and Linux footprint, you'll help shape how we do that securely from day one. This is a hands-on senior IC role focused on designing, implementing, and continuously improving identity architecture, privileged access controls, endpoint hardening standards, and our overall workforce security posture. You'll embed secure access patterns across SaaS, managed browser, mobile, and workstation environments partnering closely with other Security teams, IT, Legal, Compliance, and the business units we serve. In parallel, you'll partner with our AI Governance an opinion on operationalizing CIS benchmarks across macOS and Windows without crushing the user experience; comfort extending security to mobile and managed browser surfaces. Vulnerability Python, Go, or similar with a track record of automation that survives the person who built it. AI fluency: Curiosity for AI tools and workflows; an instinct for enabling responsibly rather than reflexively blocking. Communication: Strong writing — RFCs, one-pagers, audit narratives — and the cross-functional patience to bring stakeholders along. Compliance posture: Comfort operating in SOC 2 and ISO 27001/NIST environments, balancing risk reduction with business enablement. Enterprise network: Experience with network monitoring building/testing ACLs, firewall rules, cryptography, VPNs and tunneling/encapsulation. Preferred Qualifications Hands-on experience with Privileged Access Management (CyberArk, BeyondTrust, Delinea), Identity Governance to empower people to build wealth with confidence and ease. We set audacious goals We set them for the company, our customers, and ourselves, and we won’t stop until we reach them. We don’t just show up; we give our all, then celebrate our wins. We value all perspectives When we collaborate, we're at our best. We believe diverse perspectives lead to better outcomes and strive to uphold our supportive and inclusive community. We simplify financial services We’re financial services pioneers, always finding new ways to improve, optimize, and enhance. Constant improvement is in our DNA. Our Commitment to Your Total Well-being: We offer a competitive suite of benefits, including medical, dental, and vision coverage; life and AD short- and long-term disability; infertility support and WPATH-aligned transgender health benefits; an Employee Assistance Program (EAP); transit benefits and FSA and HSA options Ownership: Equity for all employees, including new hire and refresher grants. Time: Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in your sixth year. Growth: Company-paid professional coaching for all employees. Wealth: Day-one 401(k) match plus matching on qualified student loan payments. What happens next We’ll take a few weeks to review all applications. If we’d like to spend more time with you, we’ll reach out to arrange next steps, which will include 3-4 sets of meetings with your future colleagues. In the interview process, we’ll look to learn more about your skills, experiences, capabilities, and motivators. Many of our questions will be aimed at understanding how you might operate here at Betterment. Depending on the role, we may ask you to complete a case study exercise or technical assessments, as we want to collect a robust set of data points to better inform our decisions. On average, it takes us around 3-5 weeks to make a hiring decision, depending on your availability and sense of urgency. As a best practice, we aim to interview at least 2-3 final round candidates before making a hiring decision. Please note that, as we usually receive an overwhelming number of applications for open positions, we’re unable to offer individual feedback during the interview process. We recognize that interviewing for a new role is a big deal. We appreciate you considering Betterment as the next step in your career, and our Recruiting Team is here to support and advocate for you through the interview process! Betterment is dedicated to providing accommodations to candidates upon request. If you need accommodations at any point throughout the interview process, please reach out to your recruiter. Please note that in any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Come join us! We’re an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, religion, creed, national origin or ancestry, ethnicity, sex, gender (including gender nonconformity and status as a transgender or transsexual individual), sexual orientation, marital status, age, physical or mental disability, citizenship, past, current or prospective service in the uniformed services, predisposing genetic characteristic, domestic violence victim status, arrest records, or any other characteristic protected under applicable federal, state or local law.", "summaryDescription" : "Sr. Security Engineer, Corporate Information Security at Betterment. Skills: Identity architecture, Access controls, Endpoint hardening, Workforce security. Design identity architecture. Implement identity architecture", "postedDate" : "2026-06-14T03:38:21.776", "createdAt" : "2026-06-14T03:38:21.776", "lastUpdated" : "2026-06-15T09:22:09.285", "ingestTimestamp" : "2026-06-14T03:38:21.776", "mongoId" : "6a2ca36a74d8ee00a09aba74", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 235000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Vulnerability management", "Security automation", "Network monitoring", "ACLs", "Firewall rules", "Cryptography", "VPNs", "Tunneling", "Encapsulation", "AI fluency", "Identity architecture", "Access controls", "Endpoint hardening", "Workforce security", "Risk reduction", "Business enablement", "Automation", "Identity management", "Logical access", "Change management", "SaaS security", "Endpoint security", "Mobile security", "Managed browser security", "Workstation security", "AI Governance", "CIS benchmarks", "SOC 2", "ISO 27001", "NIST", "Enterprise network", "Privileged Access Management", "Identity Governance", "Okta", "Google Workspace", "Slack", "Atlassian", "Glean", "Jamf", "CyberArk", "BeyondTrust", "Delinea" ], "skillCount" : 42, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 722.3804, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6a8f74d8ee00a090c9be", "title" : "Senior Cybersecurity Advisor", "company" : "ABACUS", "industry" : "Consulting", "salary" : { "min" : 155000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Advisor in the US Financial Services industry, adjusted for seniority and remote work." }, "location" : "Remote in US", "locations" : [ "Remote in US" ], "certifications" : [ "CISSP", "CISM", "CCSP", "MS-500", "MS-100", "AWS Certified Security Specialty" ], "timestamp" : "2026-06-16T02:11:43.073", "fingerprint" : "f87551d291104d6efdd9fa5f0e2b1bc8021d4f208ae69c17936f03729cd85931", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://abacustechnology.com/about/careers/current-vacancies/?gh_jid=7747158003", "externalId" : "7747158003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 7, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Azure, AWS, GCP, Privileged Identity Management, Conditional Access, Infrastructure as Code, Compliance as Code, Endpoint Security, EDR, Encryption, Behavior Analysis, Email Security, ProofPoint, Mimecast, Abnormal Security, Anti-virus, HIPS, ID/PS, Full Packet Capture, Forensics", "professionalSkills" : [ "Strategic guidance", "Risk assessment", "Problem-solving" ], "hardSkillsList" : [ "Cybersecurity strategy", "Security architecture", "Network security", "Endpoint security", "Email security controls", "Cloud security", "Data privacy regulations", "Compliance assessment" ], "softSkillsList" : [ "Leadership", "Mentoring", "Coaching", "Honesty" ], "hardSkills" : [ { "name" : "Cybersecurity strategy", "level" : "intermediate" }, { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Email security controls", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Data privacy regulations", "level" : "intermediate" }, { "name" : "Compliance assessment", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Coaching" }, { "name" : "Honesty" } ], "majorSkills" : "Cybersecurity consulting, VCISO, Cloud security, Financial services security", "majorSkillsList" : [ "Cybersecurity consulting", "VCISO", "Cloud security", "Financial services security" ], "coreResponsibilities" : "Act as primary security advisor, Provide strategic guidance, Oversight of cybersecurity programs, Develop security strategies, Implement security strategies, Develop security policies, Implement security policies, Develop security procedures, Implement security procedures, Design secure architectures, Advise on secure architectures, Design secure solutions, Advise on secure solutions, Build client relationships, Maintain client relationships, Understand client security challenges, Provide tailored solutions, Provide subject matter expertise, Review risk assessment reports, Review penetration testing reports, Review cloud vulnerability recommendations, Collaborate with Red Team, Refine remediation recommendations, Improve remediation recommendations, Assess security controls, Evaluate security controls, Make recommendations on security controls, Research compliance regulations, Research data privacy regulations, Serve as senior technical resource, Perform security gap assessment", "teamCollaboration" : "Abacus Group Red Team; Client environments; Colleagues and team members", "projectManagementSkills" : [ "Project completion" ], "domainKnowledge" : "Financial services sector; Investment services; SEC; FTC; FINRA; NYDFS; CCPA; FCA; GDPR; DORA DIFC; ADGM; NIST CSF; CIS CSC v8; HIPAA; PCI-DSS; SOC2; ISO27001", "domainList" : [ "financial-services-sector", "investment-services", "sec", "ftc", "finra", "nydfs", "ccpa", "fca", "gdpr", "dora-difc", "adgm", "nist-csf", "cis-csc-v8", "hipaa", "pci-dss", "soc2", "iso27001" ], "domainSpecificKnowledge" : [ "Financial services sector", "Investment services", "SEC", "FTC", "FINRA", "NYDFS", "CCPA", "FCA", "GDPR", "DORA DIFC", "ADGM", "NIST CSF", "CIS CSC v8", "HIPAA", "PCI-DSS", "SOC2", "ISO27001" ], "toolProficiency" : [ "Microsoft 365", "ProofPoint", "Mimecast", "Abnormal Security" ], "communicationSkills" : "Verbal communication; Written communication; Communicating complex concepts", "continuousLearning" : "Continuously learn; Grow; Innovate", "innovationCreativity" : "Innovate", "problemSolvingSkills" : "Problem-solving", "specialRequirements" : "Occasional travel", "qualificationsBasic" : "5+ years technology leadership, 3+ years experience with major cloud hosting service providers, Azure or AWS automation and problem-solving skills", "qualificationsPreferred" : "Masters' Degree preferred, Ability to travel to client sites on an occasional basis", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Job Description: We are seeking a highly skilled and experienced Senior Cybersecurity Advisor to join our world-class cybersecurity consulting (vCISO) team at Abacus Group. The ideal candidate will have a deep understanding of information security strategies suitable for small and mid-size businesses within the financial services sector coupled with the technical expertise to guide and advise on implementation efforts. Responsibilities (including but not limited to): Act as the primary security advisor for multiple clients, providing strategic guidance and oversight on all aspects of their cybersecurity programs. Develop and implement security strategies, policies, and procedures for varying client environments. Design and advise on the implementation of secure architectures and solutions tailored to client needs. Build and maintain strong relationships with clients, understanding their unique security challenges and providing tailored solutions. Provide subject matter expertise on network and endpoint security to the Abacus Group Red Team to include reviewing relevant risk assessment and penetration testing reports and recommendations related to cloud vulnerabilities. Collaborate closely with the Red Team to refine and improve remediation recommendations within security testing reports. Internally assess, evaluate, and make recommendations to management regarding the adequacy of the security controls for customer security programs. Researching and keeping up to date with industry compliance and data privacy regulations, most specifically within the investment and financial services space, including SEC, FTC, FINRA, NYDFS, CCPA, FCA, GDPR, DORA DIFC, and ADGM. Serving as a senior technical resource compliance information security gap assessment for various regulations and frameworks. (NIST CSF, CIS CSC v8, HIPAA, PCI-DSS, SOC2, ISO27001, etc.) Ability to travel to client sites on an occasional basis preferred Skills: Proven expertise on the administration, security, and configuration of one major cloud platform (Azure, AWS, or GCP) Proven expertise in the realm of identity and access management (IAM) leveraging solutions such as Privileged Identity Management (PIM) and conditional access policies. Experience working with cloud automation to include infrastructure as code and compliance as code. Experience configuring and supporting endpoint security tools (EDR, Encryption, Behavior Analysis) Experience configuring email security controls (such as Defender for Microsoft 365, ProofPoint, Mimecast, Abnormal Security, etc.) Proficient in various security solutions, including Anti-virus, HIPS, ID/PS, Full Packet Capture, and Forensics. Strong attention to detail and well organized. Excellent verbal communication and written communication skills, especially when communicating complex concepts to non-technical audiences. Highly motivated to continuously learn, grow and innovate. Qualifications: Education: Bachelors’ Degree (Masters’ Preferred) in one of the following areas of concentration: Computer Science, Software Development, Information Technology, Cybersecurity. Experience: 7+ years of progressive technology experience with a blend of technical knowledge and a customer-focused mindset including: 5+ years of technology leadership experience; demonstrated ability to recruit, mentor, coach, and develop individual contributors 3+ years of experience with major cloud hosting service providers, with focus on Azure or AWS Strong automation and problem-solving skills and ability to carry tasks and projects to completion Certifications: Relevant certifications such as CISSP, CISM, CCSP, MS-500, MS-100 or AWS Certified Security Specialty or similar. You'll love this job if you: Value, integrity, and honesty above all else in a non-negotiable way Have a passion for the information security industry and helping people Are capable of managing time efficiently and meeting deadlines with multiple concurrent projects Are able to work within constraints and to challenge the status quo Are able to self-direct work, orient to action, and truly own the position Have a collaborative attitude and mindset with colleagues and team members", "summaryDescription" : "Senior Cybersecurity Advisor at ABACUS. Skills: Cybersecurity consulting, VCISO, Cloud security, Financial services security. Act as primary security advisor. Provide strategic guidance", "postedDate" : "2026-06-14T20:02:24.847", "createdAt" : "2026-06-14T20:02:24.847", "lastUpdated" : "2026-06-16T02:11:43.073", "ingestTimestamp" : "2026-06-14T20:02:24.847", "mongoId" : "6a2c6a8f74d8ee00a090c9be", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Cybersecurity strategy", "Security architecture", "Network security", "Endpoint security", "Email security controls", "Cloud security", "Data privacy regulations", "Compliance assessment", "Leadership", "Mentoring", "Coaching", "Honesty", "Cybersecurity consulting", "VCISO", "Financial services security", "Strategic guidance", "Risk assessment", "Problem-solving", "Project completion", "Financial services sector", "Investment services", "SEC", "FTC", "FINRA", "NYDFS", "CCPA", "FCA", "GDPR", "DORA DIFC", "ADGM", "NIST CSF", "CIS CSC v8", "HIPAA", "PCI-DSS", "SOC2", "ISO27001", "CISSP", "CISM", "CCSP", "MS-500", "MS-100", "AWS Certified Security Specialty", "Microsoft 365", "ProofPoint", "Mimecast", "Abnormal Security" ], "skillCount" : 46, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 717.1476, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a48de74d8ee00a05e23c8", "title" : "Information System Security Officer (ISSO)", "company" : "Dark Wolf Solutions", "salary" : { "min" : 140000.0, "max" : 160000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, United States", "locations" : [ "Arlington", "Virginia", "United States", "Herndon", "Virginia", "United States" ], "timestamp" : "2026-06-13T09:07:02.240", "fingerprint" : "17cd87c1106648ed7c1b0b1251a1c03a9ebb4fd7682288733c72a85993fd3e56", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/darkwolfsolutions/jobs/7748552003", "externalId" : "7748552003", "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "Splunk, Elastic", "professionalSkills" : [ "System security", "Risk management", "Assessment and Authorization" ], "hardSkillsList" : [ "Security assessment", "Authorization process", "Fix actions", "Compensating controls" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security assessment", "level" : "intermediate" }, { "name" : "Authorization process", "level" : "intermediate" }, { "name" : "Fix actions", "level" : "intermediate" }, { "name" : "Compensating controls", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Information System Security, Assessment and Authorization, Risk management", "majorSkillsList" : [ "Information System Security", "Assessment and Authorization", "Risk management" ], "coreResponsibilities" : "Lead team to develop security, Manage information system security, Maintain information system security, Develop Assessment and Authorization, Provide fix actions, Provide compensating controls, Perform POA", "teamCollaboration" : "Collaborative team", "domainKnowledge" : "Air Force A&A process; DoD DevSecOps; DoD Fast Track ATO; Air Force Continuous ATO", "domainList" : [ "air-force-a-a-process", "dod-devsecops", "dod-fast-track-ato", "air-force-continuous-ato" ], "domainSpecificKnowledge" : [ "Air Force A&A process", "DoD DevSecOps", "DoD Fast Track ATO", "Air Force Continuous ATO" ], "toolProficiency" : [ "Splunk", "Elastic" ], "communicationSkills" : "Client interactions", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "US Citizenship, TS/SCI security clearance", "qualificationsBasic" : "US Citizenship, TS/SCI security clearance, Bachelor's in Information Security, Bachelor's in Computer Science, 3 years equivalent industry experience", "qualificationsPreferred" : "Knowledgeable with Air Force A&A process, Knowledge of SIEM tools, Knowledgeable with DoD DevSecOps Fundamentals Playbook, Experience with DoD Fast Track ATO Handbook, Experience with Air Force Continuous ATO Playbook", "workSiteFlexibility" : "Onsite", "rawDescription" : "Dark Wolf is seeking an Information System Security Officer (ISSO) to lead a collaborative team to develop, manage, and maintain information system security Assessment and Authorization (A ability to provide fix actions and compensating controls. Performs POA especially during interactions with clients B. A. or B. S. Information Security, Computer Science or related discipline; or in lieu of degree, 3 years of equivalent industry experience US Citizenship and have a TS/SCI security clearance Desired Qualifications: Knowledgeable with the Air Force A&A process and requirements Knowledge of SIEM tools such as Splunk/Elastic Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience with DoD Fast Track ATO Handbook & Air Force Continuous ATO Playbook methodologies The salary range for this position is estimated to be between $140,000.00 - $160,000.00, commensurate on experience and technical skillset. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.", "summaryDescription" : "Information System Security Officer (ISSO) at Dark Wolf Solutions. Skills: Information System Security, Assessment and Authorization, Risk management. Lead team to develop security. Manage information system security", "postedDate" : "2026-06-11T17:12:59.029", "createdAt" : "2026-06-11T17:12:59.029", "lastUpdated" : "2026-06-13T09:07:02.240", "ingestTimestamp" : "2026-06-11T17:12:59.029", "mongoId" : "6a2a48de74d8ee00a05e23c8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 140000, "salaryAnnualMax" : 160000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security assessment", "Authorization process", "Fix actions", "Compensating controls", "Leadership", "Information System Security", "Assessment and Authorization", "Risk management", "System security", "Air Force A&A process", "DoD DevSecOps", "DoD Fast Track ATO", "Air Force Continuous ATO", "Splunk", "Elastic" ], "skillCount" : 15, "jobCategory" : "other", "jobSubcategory" : "cybersecurity", "dataQualityScore" : 0.8888889, "_score" : 705.6318, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a16291c58b93c861e95a141", "title" : "Cybersecurity Architect", "company" : "HDR", "industry" : "Consulting", "salary" : { "min" : 155000.0, "max" : 215000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Cybersecurity Architect in Omaha, United States, adjusted for consulting industry and company size." }, "location" : "Multiple Locations", "locations" : [ "Multiple Locations" ], "timestamp" : "2026-06-16T01:54:24.648", "fingerprint" : "adafa01c0a6eb4513fa5103356b00f05186f7591679d59d0ccaab2685555b990", "source" : "taleo", "language" : "en", "applyUrl" : "https://hdr.taleo.net/careersection/ex/jobdetail.ftl?job=778031", "externalId" : "778031", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Omaha", "state" : "Nebraska", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.2587459,-95.9383758" } ], "locationText" : "Omaha, Nebraska, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Network administration", "professionalSkills" : [ "System design", "Infrastructure implementation" ], "hardSkillsList" : [ "Network administration" ], "softSkillsList" : [ "Active participant" ], "hardSkills" : [ { "name" : "Network administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Active participant" } ], "majorSkills" : "Cybersecurity architecture, Network architecture, Systems architecture", "majorSkillsList" : [ "Cybersecurity architecture", "Network architecture", "Systems architecture" ], "coreResponsibilities" : "Administer technology systems, Support technology systems, Design infrastructure systems, Implement infrastructure systems", "teamCollaboration" : "Employee-owned culture", "projectManagementSkills" : [ "Project design" ], "domainKnowledge" : "Network architectures; Systems architectures", "domainList" : [ "network-architectures", "systems-architectures" ], "domainSpecificKnowledge" : [ "Network architectures", "Systems architectures" ], "qualificationsBasic" : "Bachelor's degree or education/experience combination, 5+ years administration/support of technology systems, Experience with project design and implementation, Proficiency in Network Admin II functions, In-depth technical knowledge of network/systems architectures", "remoteFriendly" : false, "rawDescription" : "Required Qualifications Bachelor's degree in a closely related field or combination of education and relevant experience A minimum of 5 years of experience with administration and support of technology systems Experience on project design and implementation of complex infrastructure systems Proficiency in Network Admin II functions In-depth technical knowledge of network and systems architectures and technologies Attitude and commitment to being an active participant of our employee-owned culture What We Believe HDR is our company. Together, we build on each other's life experiences and perspectives to make great things possible every day. This shapes our collaborative culture, encourages organizational trust and connects us closer to the clients and communities we serve. Our Commitment As employee owners, we all have a role in creating an inclusive environment where each of us is welcomed, valued, respected and empowered to bring our authentic selves to work every day. Our eight Employee Network Groups (Asian Pacific, Black, Hispanic/Latino(a), LGBTQ+, People with Disabilities, Veterans, Women, Young Professionals) help create a sense of belonging and foster a supportive environment where everyone is empowered to engage and contribute. Each group has an executive sponsor and is open to all employees. United States-Nebraska-Omaha", "summaryDescription" : "Cybersecurity Architect at HDR. Skills: Cybersecurity architecture, Network architecture, Systems architecture. Administer technology systems. Support technology systems", "createdAt" : "2026-06-14T20:43:43.147", "lastUpdated" : "2026-06-16T01:54:24.648", "ingestTimestamp" : "2026-06-14T20:43:43.147", "mongoId" : "6a16291c58b93c861e95a141", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 215000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Network administration", "Active participant", "Cybersecurity architecture", "Network architecture", "Systems architecture", "System design", "Infrastructure implementation", "Project design", "Network architectures", "Systems architectures" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 703.5322, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Consulting", "llmIndustryConfidence" : 0.95 } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 120730, "totalPages" : 2415, "hasNext" : true, "hasPrevious" : false } }

Cybersecurity Information System Security Manager Issm Jobs in New York

Cybersecurity – Information System Security Manager (ISSM)

Information System Security Officer (ISSO)

Associate Director, Information Security Risk

Senior Manager, Information Security

Associate Director, Information Security Risk

Information System Security Engineer

Cybersecurity – Information System Security Officer (ISSO)

Information / Cybersecurity Engineer (Clearance Required)

Cybersecurity Network Security Specialist

Information Security Analyst

Information Security Administrator

Cybersecurity Network Security Specialist

Information Security Officer

Cybersecurity Analyst

Information Security Systems Analyst

Cybersecurity – Information System Security Officer (ISSO)

Senior Information Security Engineer

Computer Information Systems/Information Technology/Cybersecurity Instructor

Agency Chief Information Security Officer

Information Security Consultant

Lead Information Systems Security Officer (ISSO)

Information Systems Security Officer

IT & Cybersecurity Manager

Information Security Controls Manager - Cloud & AI Governance

ISE Information Security-IT Generalist

HR Information Systems Manager

Information Security Consultant

Information Security Analyst

Chief Information Security Officer

Information Security Officer

Information Systems Security Officer (ISSO)

Information Security Consultant

Cybersecurity Policy Developer

Senior Information Security Engineer, Product Security Engineering

Business Information Risk Lead

Security Officer - Classified Information

Senior Director, Information Security & Compliance

Cleared On Site Mid-Level Information Systems Security Officers (ISSO)

Director of Information Security

Information Security Officer

Cybersecurity Engineer

Senior Cybersecurity Architect, Agentic SOC Modernization & AI-Enabled Security Operations

Senior Information Security Engineer, Offensive Security

Information Assurance Specialist III

Sr. Director, Information Security & Cloud Operations

Information Security & Compliance Officer

Sr. Security Engineer, Corporate Information Security

Senior Cybersecurity Advisor

Information System Security Officer (ISSO)

Cybersecurity Architect

Common Questions