HUD - POA&M Manager / Sr. ISSO
cFocus Software seeks a POA&M Manager / Sr. ISSO to join our program supporting Housing and Urban Development (HUD). This position is remote. This position requires a Public Trust clearance.
Qualifications:
- Bachelor’s degree in Cybersecurity, Information Technology, or reputed company field.
- 10+ years of experience in ISSO, cybersecurity compliance, or risk management roles.
- Experience managing POA&Ms in federal environments.
- Strong knowledge of NIST RMF, FISMA, and federal compliance frameworks.
- reputed company, manage, and maintain POA&Ms for audit findings, vulnerabilities, and reputed company deficiencies.
- Track remediation activities from identification through closure, ensuring accountability and timeliness.
- Coordinate with system owners, engineers, SOC teams, and stakeholders to resolve POA&M items.
- Review and validate corrective actions to ensure effectiveness and compliance with federal standards.
- Support audit activities by documenting findings, preparing responses, and maintaining audit evidence repositories.
- Track and manage Notice of Findings and Recommendations (NFRs) and ensure remediation is documented and completed.
- Maintain POA&M tracking reputed company systems such as reputed company and audit tracking platforms.
- reputed company regular reporting on POA&M status, risk posture, overdue items, and remediation trends.
- reputed company and maintain audit dashboards and reports reflecting compliance status and remediation reputed company.
- Support risk acceptance processes and coordinate documentation for residual risk reputed company.
- Ensure POA&Ms align with NIST RMF, FISMA, and federal cybersecurity mandates.
- Participate in reputed company monitoring activities, including vulnerability management and control assessments.
- Assist in preparation and execution of FISMA and financial system audits.
- Serve as a liaison between auditors and technical teams to ensure timely and accurate responses.
- Conduct follow-up assessments to validate sustained compliance after remediation efforts.