Information Security Officer Job at We Are Meta (Porto)

Senior Information System Security Officer

We are seeking a highly skilled and mission-driven Senior Information Systems Se...

Location

United States , Clarksburg

Salary:

Not provided

Innovative Management & Technology Services

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field (or equivalent combination of education and experience)
8+ years of progressive experience in information systems security, with at least 3 years in a senior-level or lead ISSO role supporting federal or state government agencies
Strong working knowledge of: NIST 800-53, RMF, FISMA, OWASP Top 10, and SANS Institute standards
SAFe Agile environments and integrating security in Agile workflows
Networking, Linux/Windows system administration, and secure software development practices
Cloud platforms (AWS, Azure, GCP) and related security tools (e.g., AWS Security Hub, Azure Defender)
Experience in managing security documentation, participating in audits, and working with compliance frameworks
Relevant certifications such as CISSP, CISM, Security+, CEH, or equivalent
Active Top Secret clearance is required
U.S. Citizenship is required

Job Responsibility

Lead the implementation and maintenance of system security controls in compliance with federal cybersecurity frameworks, including NIST SP 800-53, RMF, OWASP, DISA STIGs, and Common Criteria
Oversee the full lifecycle of Authorization to Operate (ATO) processes, including preparation of System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and risk assessments
Serve as a senior security advisor and liaison to system owners, developers, DevOps engineers, and government stakeholders
Participate in technical reviews of system architecture and ensure secure design of virtualized and software-defined infrastructures
Support integration of security controls into CI/CD pipelines using DevSecOps principles and tools (e.g., Jenkins, GitLab CI, SonarQube, Snyk)
Provide security engineering support for modern cloud environments, including AWS, Azure, or Google Cloud Platform, and assess cloud-native security capabilities
Conduct vulnerability assessments, interpret scan results from tools like Tenable, Nessus, Splunk, or Qualys, and lead remediation efforts
Mentor junior ISSOs and analysts on security policies, best practices, and tool usage
Ensure continuous monitoring activities are aligned with organizational risk tolerance and compliance goals

What we offer

competitive compensation
excellent benefits including tuition reimbursement and employer-contributed 401K
referral bonuses

Fulltime

Information Systems Security Officer

Hoplite Solutions is seeking a self-starting, motivated individual to be an Info...

Location

United States , Fort Meade

Salary:

Not provided

Hoplite Solutions

Expiration Date

Until further notice

Requirements

Bachelor's degree plus 5-years of relevant experience or Master's degree plus 3-years of relevant experience
An Associate's degree or 18 semesters hours of military coursework/training in a computer-related field plus 7-years of relevant experience or high school diploma/GED plus 9-years of relevant experience may be considered
Information Assurance Manager (IAM) Tier 1 certification
Active TS/SCI with Polygraph required
Experience as an ISSO with emphasis on Defense-in-Depth principles, network, and enterprise security architecture
Experience applying the principles of the NIST 800-53 including the procedures in the Risk Management Framework (RMF)
Familiarity with STE/STN requirements

Job Responsibility

Ensure the appropriate operational security posture is maintained for information systems
Support continuous monitoring of networks to detect and correct areas of security non-compliance, unmitigated vulnerabilities, and other risks
Follow consistent security processes and play a role in the information systems continuous monitoring program
Perform regular audits of information systems
Assist the information systems security manager in preparing the information system for periodic reaccreditation
Responsible for 8-10 System Security Plans (SSPs)

What we offer

Full coverage for health, dental, and vision insurance for both individuals and families
100% coverage for life insurance, long-term and short-term disability
Match up to 7% of employees' contributions to their 401(k) funds
Follow the federal holiday calendar for paid holidays
4 weeks of paid time off
$5,000 yearly for education assistance or technical training
$3,000 yearly toward student loan repayment or a 529 College Savings Plan

Fulltime

Information Systems Security Officer

The Information Systems Security Officer (ISSO) is responsible for safeguarding ...

Location

United States; Canada , Athens, Georgia; Atlanta, Georgia; Toronto, Ontario

Salary:

Not provided

Docebo

Expiration Date

Until further notice

Requirements

8+ years of experience in information systems security, with a focus on compliance with NIST and DoD guidelines
In-depth knowledge of FedRAMP, NIST SP 800-37, NIST SP 800-53, and DoD 8510.01 policies and procedures
Strong technical writing skills for developing SOPs, work instructions, and senior-level briefs
Proficient in risk and vulnerability assessment, security infrastructure design, and continuous monitoring
Prior experience on obtaining FedRamp ATO

Job Responsibility

Own the FedRAMP/DoD RMF authorization lifecycle for assigned systems (strategy → authorization → continuous monitoring → ATO maintenance)
Define and maintain the FedRAMP program governance model, roles & responsibilities (including Sponsor/Authorizing Official interactions)
Create, own, maintain, and version-control the System Security Plan (SSP), Security Assessment Report (SAR), continuous monitoring (ConMon) artifacts, POA&Ms, SSP annexes, and all ATO package deliverables
Build and run the ConMon program: define telemetry requirements, dashboards, vulnerability ingestion, thresholds, incident feed, and reporting cadence
Triage vulnerabilities, manage POA&Ms (track remediation owners, dates, residual risk), and ensure POA&M closure meets customer and FedRAMP expectations
Lead the selection, engagement, and technical coordination with 3PAOs and any external assessors. Ensure assessments, testing, and SAR content are accurate and timely
Evaluate security impact for architectural or operational changes (Security Impact Analysis), own risk acceptance processes, and coordinate Risk Acceptance with Sponsors/Authorizing Officials
Integrate change control with the ConMon program to ensure authorized/approved changes are documented and do not break control baselines
Act as the primary internal liaison across Product, Engineering, DevOps, Security, Sales, Legal, and Marketing for anything impacting the FedRAMP posture and ATO timelines. Drive working groups and weekly syncs
Support pre-sales and customer conversations on FedRAMP posture and timelines alongside Sales

What we offer

Generous Vacation Policy, plus extra floating holidays to use for religious or cultural events that matter to you
Employee Share Purchase Plan
Career progression/internal mobility opportunities
Four employee resource groups to get involved with (the Docebo Women's Alliance, PRIDE, BIDOC, and Green Ambassadors)
WeWork partnership and “Work from Anywhere” program

Fulltime