Overview:
In this role you help safeguard information across the bank by applying FedRAMP High and NIST RMF along with FISMA. You will develop and maintain FedRAMP documentation, drive ATO processes, and monitor controls to ensure ongoing compliance. You’ll act as the main liaison for audits and risk inquiries, collaborating with technical and non-technical teams to close gaps. This is a chance to shape information security governance in a leading financial services environment. Compensation / Benefits competitive compensation wellbeing programs flexible global resources and tools paid leaves paid volunteer time Company-sponsored benefit programs
Responsibilities:
Lead the Authority to Operate (ATO) processes for information systems Develop and maintain FedRAMP documentation with regular reviews Ensure internal controls for information risk management are effective and compliant with FedRAMP High Perform security control assessments and measure control effectiveness Serve as primary contact for audits, security documentation, and control compliance inquiries Collaborate with cross-functional teams to address issues and gather risk information Present ATO status, audit findings, remediations, and control gaps Identify threats and vulnerabilities and coordinate evidence for audits Contribute to reducing reputational and regulatory risk from non-compliance Prepare and coordinate audit evidence and respond to audit findings
Key requirements:
10+ years of information security or related technology experience Experience in the securities or financial services industry is a plus Bachelor's in Computer Science or related discipline (or equivalent work experience) Experience with federal compliance preferred Demonstrated experience managing or executing successful ATO processes preferred CISM, CISSP, or CISA security certification preferred Deep understanding of FISMA requirements and NIST SPs (800-53, 800-37, 800-171) Strong RMF knowledge and ability to apply control frameworks Proficiency with M365 applications Excellent decision-making Strong teamwork and collaboration High attention to detail FedRAMP High knowledge NIST RMF and FISMA expertise Security control assessments and remediation
