Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system…
Skills: Information Security, Governance, Risk, and Compliance, Security Control Assurance, Risk Management, Regulatory Compliance
Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system…
Skills: Software development, Systems development, Prototype development, C, C++
Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system…
Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system…
Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system…
Skills: Research engineering, Systems development, Network security, Cryptography, Privacy
Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system…
Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system…
Overview WiSC Enterprises is a mission-focused, veteran-owned small business providing expert support within the Defense and Intelligence Community. We specialize in delivering cleared professionals to high-impact progra…
Description Position Summary: The UI/UX Developer designs and implements the user interfaces for the platform. You will translate research and designs into accessible, high-quality front-end experiences, partnering with …
Why Kensington Senior Living? Because Our Promise to love and care for your family as we do our own. These are not just words – but something all of us at Kensington Senior Living strive to deliver each day. Join u…
Skills: Registered nurse, Patient assessment, Care planning, Clinical documentation, Time management
Description Position Summary: The Senior Business Analyst leads requirements and analysis for delivery. You will elicit and document complex requirements, translate business needs into user stories and acceptance criteri…
Skills: Business Analysis, Requirements Elicitation, Agile Delivery, Backlog Management, User Stories
Description Position Summary: The Architect/Technical Lead guides the engineering work of a Sprint Team on the platform. You will own technical direction and code quality for your team, mentor developers, and ensure solu…
Description Position Summary: The Database Developer designs and builds the data layer for the platform. You will develop schemas, queries, and data pipelines on AWS data services, optimize performance, and ensure data i…
Description Position Summary: The Senior Business Analyst/Data Analysis leads requirements and analysis for delivery. You will elicit and document complex requirements, translate business needs into user stories and acce…
Skills: Business Analysis, Requirements Elicitation, Agile Delivery, Backlog Management, Data Modeling
Description Position Summary: The Delivery Manager owns delivery execution for a key workstream of the program. Workstream teams vary from 25-50 resourced scrum teams. You will be responsible technical delivery managemen…
Description The Senior Reporting Analyst leads program and delivery reporting for the platform. You will design dashboards and metrics, turn program data into actionable insight for leadership and the client, and mentor …
Skills: Reporting, Business Intelligence, Data Analysis, Power BI, Tableau
ECS is seeking a Program Manager/Software Developer to work in our Fairfax, VA (hybrid) office. The USPS TAPM Team supports the acquisition, testing, acceptance, deployment, and integration of technology systems that imp…
Territory Manager - Home Fragrance and Accessories
Reston, Virginia, United States · On-site
$50k–$60k/yr
Mid level
Harper Group was founded and built upon integrity, professionalism and a dedication to sales achievement for our retailers and manufacturers alike throughout all of our territories. Harper Group represents multiple high …
Skills: Outside sales, Face-to-face selling, Closing skills, Merchandising, Customer service
A Day in the Life: When you begin your job with us working on the front-end as a courtesy clerk, customer service associate, or cashier, you are taking a step towards an opportunity that can help you learn, grow, and eve…
A Day in the Life: As a Night Stocker, you provide friendly, courteous, and helpful service. You keep the store looking filled and fresh by stocking and organizing merchandise on the shelves. You work with various approv…
Manage an enterprise-wide security control assurance and compliance program while leading a team of practitioners. Collaborate with engineering teams to automate control monitoring and report risk trends to senior leadership.
Requirements
Requires 8+ years of experience in information security governance, risk, and compliance, including 4+ years in security control assessment. Candidates must possess a bachelor's degree and professional security certifications such as CISSP, CISA, CISM, or CRISC.
Full job description
Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system (DNS) services.
We are a mission focused, values driven company where each individual can contribute to building a stronger, more secure internet. We offer a dynamic and flexible work environment with competitive benefits and the ability to grow your career.
Verisign is seeking a hands-on technical manager to join an impactful Information Security Governance, Risk, and Compliance (GRC) team. In this role, you will support an enterprise-wide governance, risk, and compliance program focusing on security control assurance, security risk management, policies and standards, continuous control monitoring, and ensuring compliance with internal and external security requirements.
Some immediate focus areas include:
Reviewing information security control design and conducting tests
Standing up automated evidence collection practices
Responding to external regulatory information requests
An ideal candidate cares deeply about automation and reducing friction. We expect the candidate to possess competencies that allow them to bring noticeable and measurable improvements in some of the above-mentioned areas. This position requires the technical depth and communication range to brief audiences from system engineers to senior leadership.
Primary Responsibilities:
Manage a security control assurance program, including planning and executing test procedures, assessing design and operating effectiveness, and driving identified gaps to remediation.
Manage compliance with external regulatory obligations, translating requirement into control objectives, coordinating regulator information requests, and tracking remediation commitments.
Build a continuous control monitoring program by collaborating with control and system owners and translating security control requirements into automated tests.
Interface directly with technical engineering teams to design and improve security controls, define implementation requirements, and determine what effective security control operations should look like.
Report on compliance and control assessment results, risk trends, and remediation priorities to audiences ranging from controls owners to senior leadership through clear reporting, executive briefings, and dashboards.
Assist with the development of enterprise information security policies and standards.
Lead a team of practitioners, setting priorities and quality standards, and ensuring commitments are met.
Qualifications:
Domain expertise in cyber security standard methodologies and security control frameworks such as CIS Controls, SOC 2/3 Trust Services Criteria, NIST Cybersecurity Framework, and NIST SP800-53; with hands-on experience testing and mapping controls across frameworks
Experience in a public company environment managing compliance across multiple regulatory and security frameworks
Technical understanding of security controls, identifying control objectives, and how to implement them in a complex enterprise IT environment
Ability to creatively develop and refine control tests tailored to specific control implementations
8+ years progressively responsible experience in information security governance, risk, compliance, or security assessment/audit
4+ years of security control assessment experience required
2+ years of related experience leading or managing others
Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) are preferred
Bachelor's degree in Information Systems, Computer Science, or related field, or equivalent experience, required
This position is based in our Reston, VA office and offers a hybrid work schedule.
The pay range is $135,800 - $183,800.
The anticipated annual base salary range for this position is noted above, however, base pay offered may vary depending on job-related knowledge, skills, experience. Verisign offers a discretionary bonus which is based on individual and company performance, and certain roles may be eligible for discretionary stock awards.
Verisign is an equal opportunity employer. That means we recruit, hire, compensate, train, promote, transfer, and administer all terms and conditions of employment without regard to their race, color, religion, national origin, sex, sexual orientation, gender identity, age, protected veteran status, disability, or other protected categories under applicable law.