Find work in the United States.

A simpler way to find your next job.

Jobs in the United States

25+ jobs

Save this search

Added 2 hours ago
IT Systems Solutions Architect, Senior (RMF)
Paragon Cyber Solutions
Aberdeen Proving Ground, MD
Support Security Control Assessor (SCA) visits, assessments and authorization activities
Added 2 hours ago
Senior RMF Engineer
Paragon Cyber Solutions
Aberdeen Proving Ground, MD
Support Security Control Assessor (SCA) visits and authorization activities
Added 2 hours ago
Information Systems Security Officer
Resource Management Concepts, Inc.
Charleston, SC
Ability to meet applicable cybersecurity workforce requirements, including Full Security Control Assessor qualification if required.
Added 3 hours ago
Cybersecurity and Compliance Senior Manager or Director, Texas Institute for Electronics
The University of Texas at Austin
AUSTIN, TX
…critical pilot manufacturing capabilities to address national security needs and catalyze domestic economic…
Added 6 hours ago
IT Security Audit Specialist
Farmers Mutual Hail Insurance Company
West Des Moines, IA
FMH is seeking an IT Security Audit Specialist to support the organization’s compliance and annual assessment activities, including audit readiness, evidence validation, control testing,…
Added 6 hours ago
Collateral SAV Audit & Compliance Specialist
BAE Systems
Austin, TX
Evaluate security controls, classified facility compliance, access control procedures, safeguarding practices, and physical security requirements.
Added 8 hours ago
Security Authorization Lead
LEIDOS, INC.
Gaithersburg, MD
…workloads on government-provided cloud infrastructure, including security assessments, architecture reviews, control evidence, and assessor…
Added 8 hours ago
IT Certified Professional - Senior
UPSLOPE ADVISORS, INC
Aberdeen, MD
Support Security Control Assessor (SCA) visits, reviews, validation activities, and remediation responses.
Added 9 hours ago
Cyber Security/Information Assurance Engineer
CACI International
Chantilly, VA
The Cyber Security/Information Assurance Engineer/Technician will function as a Security Control Assessor (SCA) following National Institute of Standards and Technology (NIST) Special…
Added 10 hours ago
IT Director
Bryan Construction Inc
Colorado Springs, CO
Experience developing and maintaining: System Security Plans (SSP), Incident Response Plans, and access control and identity management policies
Added 1 day ago
Staff / Senior Data Center Security Engineer
Anthropic
Remote, United States
Security event response: respond to security events at sites (intrusion alarms, custody breaks, access violations) with operations teams and site operators; write up what happened and fix…
Added 1 day ago
Cyber Analyst, Sr. (Hampton, VA)
Referentia Systems Inc
Hampton, VA
…executing cyber risk assessments to perform duties assigned by the Security Control Assessor (SCA) for the Department of the Air Force (DAF) Enterprise Authorizing Official (EAO) systems.…
Added 1 day ago
Cybersecurity Specialist
Fusion Technology
Aberdeen, MD
Assemble compliance evidence for security control assessments and respond to assessor data calls.
Added 1 day ago
Cybersecurity Specialist
Fusion Technology
Aberdeen, MD
Assemble compliance evidence for security control assessments and respond to assessor data calls.
Added 1 day ago
Information Systems Security Officer
Govcio LLC
United States
Review and analyze vulnerability results using Tenable Security Center; create, track, and manage POA&M remediation activities through closure; validate scan completeness before Security…
Added 1 day ago
Information System Security Manager (ISSM)
Sawdey Solution Services
Wright Patterson AFB, OH
Coordinate with the Authorizing Official (AO), Authorizing Official's Representative (AOR), Security Control Assessor (SCA), system owners, program managers, mission owners, engineers, and…
Added 1 day ago
Security Assessor
Chenega Corporation
UNAVAILABLE, VA
The Security Assessor will play a critical role in ensuring the security and compliance of the HHS ACL EITS program's information systems. The individual will be responsible for assessing…
Added 2 days ago
Regulated Research Facilitator
UWMSN University of Wisconsin Madison
Remote, United States
…will translate these requirements into actionable technical, security, and compliance considerations for Regulated Research engineers supporting both Azure-based services and the…
Added 2 days ago
Mid-Level Information System Security Officer #TS999
CRL Technologies Inc
Lexington Park, MD
…submitted. ISSOs will also maintain communications with the Security Control Assessor (SCA)/Delegated Authorizing Official (DAO), understand issues, and report issues to the ISSM and…
Added 2 days ago
Information System Security Engineer (ISSE)
Interactive Process Technology LLC
Wright-Patterson AFB, OH
Provide technically supported findings, risk recommendations, and authorization-status updates to the AO, designated representatives, Security Control Assessor, and other stakeholders.
Added 2 days ago
Cyber Security/Information Assurance Engineer
CACI, INC.-FEDERAL
Chantilly, VA
The Cyber Security/Information Assurance Engineer/Technician will function as a Security Control Assessor (SCA) following National Institute of Standards and Technology (NIST) Special…
Added 2 days ago
Sr. SECURITY SPECIALIST/ISSM (CLOUD-CYBER)
Quantum Research International Inc
HUNTSVILLE, AL
Serve as the IS primary POC when communicating with the Security Control Assessor (SCA).
Added 2 days ago
Cyber Security/Information Assurance Engineer
CACI
Chantilly, VA · Chantilly
The Cyber Security/Information Assurance Engineer/Technician will function as a Security Control Assessor (SCA) following National Institute of Standards and Technology (NIST) Special…
Added 2 days ago
CE
Information System Security Engineer
CommIT Enterprises, Inc
Oceanside, CA
- $90,000 to $125,000 USD / year
Support the Security Control Assessor (SCA) and Authorizing Official (AO) review of the security control set to address any feedback received during the review
Added 2 days ago
Security Compliance Specialist
N. Harris Computer Corporation - USA
GA · TX · FL · AZ · NV
PCIP (Payment Card Industry Professional) and willingness and ability to obtain PCI ISA (Internal Security Assessor) after hire if PCI DSS responsibilities are assigned

Jobgether

Information Security Program Manager

Remote, United States

$105,000 to $120,000 CAD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $105,000 to $120,000 CAD / year
Posting language: English
Posted: Oct 28, 2026

Original job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Security Program Manager based in United States .

In this role, you will lead information security programs that protect critical systems, sensitive data, and business operations across multiple client environments. You will combine strategic security leadership with hands-on risk management, regulatory compliance, and security program oversight. Working closely with executive stakeholders, technical teams, and external auditors, you will help organizations strengthen their security posture and meet evolving industry requirements. You will oversee risk assessments, security controls, vulnerability management, and incident response coordination while ensuring alignment with recognized security frameworks. Your expertise will also support business continuity planning, security awareness initiatives, and continuous improvement. This is an opportunity to make a meaningful impact in a client-focused environment serving organizations across regulated industries.

Accountabilities

• Security program leadership: Develop, implement, and maintain information security programs aligned with business objectives, regulatory obligations, industry standards, and client requirements.

• Executive advisory and reporting: Advise senior leadership on security strategy, policies, standards, emerging threats, and potential incidents while communicating program progress, risks, and remediation priorities.

• Security policies and controls: Establish and maintain security policies and procedures that safeguard the confidentiality, integrity, and availability of information systems and data.

• Security solutions and operations: Oversee the implementation and effectiveness of security solutions, monitor changes in client environments, and coordinate incident detection, response, and resolution within established service-level agreements.

• Risk assessments and vulnerability management: Lead internal, technical, and third-party risk assessments, coordinate vulnerability scanning and penetration testing, and recommend appropriate mitigation strategies.

• Regulatory compliance: Guide clients in implementing and maintaining controls aligned with frameworks and regulations such as NIST CSF, ISO/IEC 27001/27002, HIPAA, SOC 2, PCI DSS, and other applicable requirements.

• Audit and certification support: Coordinate security audits, assessments, and certification activities by preparing evidence, clarifying control requirements, addressing findings, and tracking remediation progress.

• Risk and control management: Evaluate control maturity, identify compliance gaps, prioritize corrective actions, maintain cross-framework control mappings, and document compensating controls and risk acceptance decisions.

• Protection of regulated environments: Define security requirements for systems containing sensitive or regulated information, including electronic protected health information (ePHI), payment card data, and controlled unclassified information (CUI). Apply data classification, network segmentation, and other safeguards to manage exposure.

• Business continuity and disaster recovery: Develop, maintain, and coordinate testing of disaster recovery and business continuity plans tailored to client systems, facilities, and operational needs.

• Security awareness and collaboration: Develop and monitor security awareness training programs, collaborate with cross-functional teams to deliver secure solutions, and participate in client steering committees and working groups.

• Client relationship management: Serve as a trusted security advisor, translating complex technical and regulatory requirements into practical recommendations that support business objectives and reduce organizational risk.

Requirements

• Education: A bachelor's degree in Computer Science, Information Systems, Network Security Engineering, or a related discipline, or equivalent professional experience.

• Information security leadership: At least five years of information security leadership experience, such as Chief Information Security Officer (CISO), virtual CISO (vCISO), or another senior security leadership position.

• Technical security experience: At least three years of experience in security operations, security engineering, vulnerability management, system administration, or a related technical discipline.

• Consulting and client management: Experience in consulting or managed security services, preferably supporting multiple clients across regulated industries such as healthcare, financial services, or government contracting.

• Compliance and control implementation: At least three years of hands-on experience implementing and operating security controls aligned with frameworks such as NIST, ISO/IEC 27001, HIPAA, SOC 2, or PCI DSS.

• Audit and assessment experience: Demonstrated experience acting as a security point of contact during external audits, regulatory assessments, and certification processes.

• Risk management expertise: Working knowledge of risk assessment and management methodologies, including NIST Risk Management Framework (RMF), NIST SP 800-30, ISO/IEC 27005, ISO 31000, and FAIR, with the ability to apply them to risk treatment, prioritization, and reporting.

• Regulated data environments: Experience defining the scope of regulated systems, identifying applicable controls, and reducing compliance scope through data classification and network segmentation.

• Data protection technologies: Knowledge of encryption, tokenization, data loss prevention, secure coding practices, and other technologies used to protect sensitive information.

• Required certification: Certified Information Systems Security Professional (CISSP).

• Preferred certifications: Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP), Certified in Governance, Risk and Compliance (CGRC), or framework-specific credentials such as PCI Internal Security Assessor (ISA), HealthCare Information Security and Privacy Practitioner (HCISPP), or CMMC Certified Professional (CCP).

• Additional certifications considered an asset: Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), or Certified Information Privacy Technologist (CIPT).

• Communication and stakeholder management: Excellent written and verbal communication skills, with the ability to explain complex security and compliance requirements to both technical and non-technical audiences.

• Leadership and decision-making: Strong judgment, project management, organizational, and problem-solving skills, with the ability to prioritize competing demands and drive security initiatives to completion.

• Client-focused approach: Strong interpersonal skills, relationship management capabilities, attention to detail, and the ability to collaborate effectively across teams while maintaining a high standard of accountability.

Benefits

• Competitive annual salary: CAD $105,000–$120,000, with potential eligibility for bonus or merit-based compensation.

• Comprehensive benefits package: Access to health benefits designed to support employee well-being.

• Retirement savings: Registered Retirement Savings Plan (RRSP) matching to help support long-term financial goals.

• Stock options: Opportunities to participate in a stock option program, subject to applicable eligibility and plan terms.

• Career development: Opportunities to build expertise, expand professional skills, and advance your career.

• Collaborative workplace: A supportive, team-oriented environment that encourages knowledge sharing and cross-functional collaboration.

• Professional autonomy: Opportunities to take ownership of security initiatives, contribute strategic insights, and make a tangible impact.

• Long-term stability: The opportunity to work within an established organization with a financially stable business structure.

• Meaningful responsibilities: Exposure to diverse client environments, complex security challenges, and a broad range of regulatory frameworks.

• Inclusive workplace: A commitment to equitable employment opportunities and reasonable accommodations throughout the recruitment process.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

Apply About employer

Report this job