IL4/IL5 Strategy & Execution: Lead the compliance assessments and build-out of our IL4 and IL5 authorizations, ensuring Horizon3 meets the stringent requirements of the DoW Cloud Computing Security Requirements Guide (CC SRG).
Framework Management: Maintain and evolve our compliance posture for FedRAMP High, NIST SP 800-53, and other relevant federal frameworks.
Engineering Advisory: Act as a GRC liaison to our development and engineering teams, translating complex DoW and federal compliance requirements into actionable technical specifications for cloud-native infrastructure.
Continuous Monitoring & Auditing: Oversee internal audits, risk assessments, and the continuous monitoring (ConMon) program.
External Audits & Liaison: Serve as a primary point of contact for external auditors (3PAOs), federal sponsors, and regulatory bodies to ensure that the company meets all necessary compliance requirements.
Vendor & Security Responses: Respond to external requests for Security Questionnaires, Due Diligence, and Vendor Risk Assessments regarding Horizon3’s federal security program.
Policy Development & Training: Develop and maintain GRC policies and procedures. Create and deliver compliance training to employees to foster a security-first culture across the organization.
Incident Response: Participate in incident response and investigations related to compliance issues or federal data.
The ideal candidate is a self-starter and has a "learn-it-all" type of mentality with a passion for security.
Strong knowledge of cybersecurity frameworks and regulations, specifically DoW CC SRG (IL4/IL5), FedRAMP High/Moderate, and NIST SP 800-53.
Excellent written and verbal communication skills, capable of explaining technical compliance risks to both technical engineers and non-technical stakeholders.
Qualification
Active DoW security clearanceWe are a fully remote company
Preferred
Active DoW security clearance.
We are a fully remote company, and this job may require up to 5% of travel to be successful. Job-related travel expenses are reviewed and must be approved by your manager.
