Information SME

SME IT Security

Location: Los Angeles, CA
Support the Risk Management Framework (RMF) processes and system authorization lifecycle
Experience with GRC platforms (ServiceNow GRC)
Create systems baseline using NIST 800-53 security controls
Develop, review, and maintain security documentation (SSPs, POA&Ms, Policies and procedures, etc.)
Perform security control assessments and validation activities
Ensure compliance with NIST, ISO 27001, PCI, TSA and applicable regulatory frameworks
Conduct vulnerability assessments and track remediation efforts through risk registry
Work with system owners to identify, document, and mitigate risks
Monitor systems for compliance with security baselines and policies
Support audit readiness and respond to audit findings
Coordinate incident response activities and ensure proper reporting
Provide security guidance and awareness to stakeholders
Prepare and deliver regular status and risk reports
Collaborate with cross-functional teams to strengthen security posture
Proven experience as an Information System Security Officer (ISSO) or similar cybersecurity role
Strong knowledge of NIST RMF (CSF, 800-53) and related standards
Experience with security compliance frameworks NIST CSF 2.0, NIST 800-53 and NIST SP 800-161
Familiarity with vulnerability management tools and security assessment methodologies
Knowledge of cloud security (Azure, AWS, or GCP) is a plus
Strong understanding of network, application, and data security principles
Relevant certifications preferred (e.g.