What are the responsibilities and job description for the Senior Analyst GRC - ISSO Federal Compliance Fully Remote US position at HireVue Inc?
HireVue is looking for a passionate InfoSec professional to join the HireVue Information Security team and spearhead HireVues compliance program for its federal and public sector clients. This position will report to HireVues Director of GRC under the Chief Information Security Officer. The ideal candidate will be an experienced security professional looking to assist in securing the data of federal agencies.
Essential Duties and Responsibilities
Oversee and manage the implementation and maintenance of aspects of HireVues information security compliance program with a focus on FedRAMP and FISMA compliance requirements for HireVue systems and services
Coordinate and facilitate periodic assessments and audits by thirdparties and clients.
Oversee development and maintenance of HireVues FedRAMP authorization including development and implementation of FedRAMPspecific security policies procedures and continuous monitoring documentation.
Manage documentation of HireVues control implementation using the NIST SP 80053 (rev 5) control framework.
Document plans of action and milestones to remediate control deficiencies and gaps identified during the audit process.
Provide support as a contractor to federal clients as their information system security officer (ISSO) for their implementation of the HireVue Video Interview Platform web application.
Serve as a primary point of contact between federal clients who need additional support in their implementation of the HireVue web application and with HireVues internal teams.
Facilitate our clients security testing and audit needs of our security measures.
Qualifications :
Selfmotivated and able to work with little oversight
Bachelors degree preferred
7 years experience dedicated to Information Security and Compliance with a focus on FISMA and NIST frameworks.
Has completed a minimum of 3 FedRAMP product certifications.
Comfortable speaking directly with customers security teams and / or leadership in a way that appropriately represents the company and security capabilities.
Knowledge of and experience with information security concepts : encryption application security identity management log management disaster recovery incident response risk assessment vulnerability management etc.
Ability to balance multiple complex tasks and quickly prioritize
Excellent written and verbal communication skills with experience working with management
Ability to generate and maintain accurate and current documentation of new and existing technologies
Experience with cloud and / or SaaS security best practices is a plus.
Relevant certifications such as CISSP or CISA certification or desire to obtain is a plus
Must be able complete Public Trust background investigation as required by client.
Additional Information :
All team members at HireVue are expected to embody our core values which are the H.E.A.R.T. of HireVue. They are : Hero for our Customers Enjoy the Journey Always do the Right Thing Reach Forwards and Take Action and Go.
This position is a workfromhome role. The individual in this role must be able to work from home in an environment free from distractions where they can attend virtual video meetings.
HireVue takes security seriously and has measures in place to protect workrelated data in a remote setting. Our organization has implemented a BYOD (Bring Your Own Device) policy HireVue uses Google User Enrollment which ensures personal apps and data are kept separate from work apps and data should you choose to use your personal device for work purposes. HireVue can manage only the workrelated aspects of the device ensuring privacy for personal data.
Flexible Paid Time Off Medical Dental Vision 12 Weeks Maternity & Adoption 401K match
Click Here for US Benefits
HireVue is committed to equal treatment and opportunity in all aspects of recruitment selection and employment. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin disability veteran status or any other category protected under the law. HireVue is an equal opportunity employer; committed to a community of inclusion and an environment free from discrimination harassment and retaliation. All your information will be kept confidential according to EEO guidelines.
HireVue is NOT currently hiring in :
AK IA ME MS NM or WV.
remoteus
Remote Work : Employment Type :
Fulltime
