Responsibilities
- Act as the primary security liaison for designated systems and operational environments
- Develop and maintain in-depth knowledge of system design, data pathways, interconnections, limitations, and protective measures
- Create, assess, and update security-related documentation such as System Security Plans, control implementation summaries, policies, and compliance evidence
- Support authorization processes for FedRAMP High, GovRAMP High, DoD Impact Level 5, and other federal security standards
- Collaborate with Engineering, DevOps, IT, Security, and system owners to implement and verify security controls
- Oversee Plans of Action and Milestones by recording deficiencies, assigning accountability, monitoring fixes, and confirming resolution proof
- Support continuous monitoring efforts involving vulnerabilities, configuration adherence, control validation, system modifications, and risk exceptions
- Evaluate proposed changes to systems, infrastructure, or applications for potential security and regulatory impacts
- Coordinate responses to external auditors, third-party assessors, government entities, and internal compliance evaluations
- Assess security issues to determine risk level, business impact, corrective steps, and escalation needs
- Assist in incident response, contingency planning, disaster recovery, and simulation exercises for supported systems
- Ensure audit-ready status by maintaining accurate, up-to-date, and complete compliance records
- Monitor and report on security metrics, risks, findings, and remediation timelines to GRC and technical leadership
- Ensure systems adhere to requirements for data handling, access permissions, logging, encryption, configurations, and vulnerability tracking
- Leverage AI-powered tools like Claude, ChatGPT, or comparable platforms—when allowed—to assist with control evaluation, documentation, evidence review, research, and workflow optimization
Benefits
- Comprehensive medical, dental, and vision coverage, including benefits for domestic partners
- Employer-provided life insurance and supplemental coverage for employees, spouses, and children
- Optional short-term and long-term disability insurance plans
- 401(k) plan with Roth and traditional options
- Generous paid time off policy that recognizes tenure and includes paid leave for bereavement and jury duty
- Annual bonuses that exceed typical market rates
Compensation
Above market annual bonuses
Work Arrangement
Hybrid — remote work with presence in the Chicago, IL metropolitan area
Team
Security, Engineering, DevOps, IT, and compliance teams
Other
- Employment classification: Exempt
- Applicants must be U.S. Citizens due to involvement with GovCloud and FedRAMP environments
- Must be able to pass an enhanced security background check, including financial vulnerability screening
Not applicable
