Safal Partners logo

Information System Security Lead Consultant

Hiring from
United States
Work type
Remote
Posted

621,634 remote jobs, straight from company career pages

100% free · New jobs every minute

Show job description
Information System Security Lead
United States - Remote | 1099 Consultant
Job Description
Safal Partners is seeking an experienced Information System Security Lead to manage the security of a federal project website. Working as a 1099 consultant, you will own the website’s security compliance program from start to finish: continuous monitoring, Risk Management Framework (RMF) documentation, vulnerability management, access control, incident response, and contingency planning, all in line with ED Information Assurance Services requirements. This role suits a hands-on federal security professional who is comfortable with FedRAMP and CSAM, can keep ATO-related documentation current and audit-ready. The position requires an active U.S. Department of Education Public Trust certification.

Duties and Responsibilities
Compliance and Authorization
  • Execute continuous monitoring tasks per ED Information Assurance Services requirements
  • Maintain NIST and Risk Management Framework (RMF) compliance
  • Develop and manage Plans of Action and Milestones (POA&Ms)
  • Conduct annual self-assessments following ED protocols
  • Monitor Authorization to Operate (ATO) status and renewals, as relevant
  • Implement DHS Binding Operational Directive (BOD) requirements
Security Operations
  • Conduct monthly vulnerability scans and remediation
  • Oversee identity and access management systems
  • Maintain secure access controls and user permissions
  • Manage SSL certificate maintenance and updates
Incident Response and Continuity
  • Lead security incident response planning and execution
  • Coordinate annual tabletop exercises for the Incident Response Plan
  • Track and document security incidents
  • Maintain the Contingency Plan (CP) and disaster recovery procedures
  • Ensure compliance with Recovery Time and Recovery Point Objectives (RTO/RPO)
Documentation and Reporting
  • Manage system security documentation, including the System Security Plan (SSP)
  • Maintain security documentation and compliance records
  • Generate security assessment reports
  • Update security-related standard operating procedures (SOPs)
  • Optional: Support completion of required website/extranet paperwork
Required Qualifications
  • U.S. Department of Education security clearance (Public Trust Certification) is required
  • FedRAMP experience
  • Cyber Security Assessment and Management (CSAM) experience
Preferred Qualifications
  • CompTIA Security+ certification
  • Certified in Governance, Risk and Compliance (CGRC, formerly CAP)
  • Experience supporting federal contracts
Additional Information
Job Type: 1099 contractor
Location: Remote, must be authorized to work in the United States​

Similar jobs

Apply for this job100% free