Source Job

• Own CMMC 2.0 and SOC 2 end-to-end, including control design and implementation.
• Lead all IT functions supporting corporate and program needs, owning IT architecture and tooling decisions.
• Provide guidance and escalation support for IT hardware/software issues; mentor IT Support Specialist & Cloud Infrastructure Engineer.

DEFCON AI leverages artificial intelligence, mathematical optimization, data analytics, and software engineering for resilient optimization of complex systems. They align outcomes with operational goals, better decision making, and empower customers to anticipate, assess, and mitigate the impacts of disruptions.

• Own security posture, compliance programs, and audit readiness.
• Lead all IT functions supporting corporate and program needs.
• Provide guidance and escalation support for IT hardware/software issues as needed.

Red Cell Partners is an incubation firm building and investing in rapidly scalable technology-led companies. They bring revolutionary advancements to market in healthcare, cyber, and national security and are united by a shared sense of duty.

• Support CMMC implementation efforts
• Conduct gap assessments against CMMC/NIST SP 800-171 requirements
• Assist with the development and updates to the System Security Plan (SSP) and POA&M

Broadway Ventures transforms challenges into opportunities with expert program management, cutting-edge technology, and innovative consulting solutions. As an 8(a), HUBZone, and Service-Disabled Veteran-Owned Small Business (SDVOSB), they empower government and private sector clients by delivering tailored solutions that drive operational success, sustainability, and growth.

• Support client engagements related to CMMC readiness, implementation, and documentation
• Develop, update, and maintain System Security Plans (SSPs)
• Assist with NIST SP 800-171, NIST SP 800-53, and FedRAMP documentation, control mapping, and related deliverables

Hotman Group is a remote boutique cybersecurity and GRC firm supporting clients across a range of industries and compliance needs. They value strong writing, quality work, collaboration, sound judgment, and practical execution.

• Accelerate Onebrief’s execution of GRC programs supporting NIST RMF, FedRAMP High, CMMC, and SOC2 authorizations
• Develop and manage integrated project plans for control implementation, remediation, and continuous monitoring
• Coordinate cross-functional teams (Infrastructure, Engineering, Product) to ensure timely delivery of compliance requirements

Onebrief provides collaboration and AI-powered workflow software designed specifically for military staffs, aiming to make them faster, smarter, and more efficient. Valued at $2.15B, the company has raised $320m+ from top-tier investors and operates as an all-remote company.

• Implement and maintain enterprise security tooling and approved configuration baselines across endpoints, browsers, SaaS platforms, and identity systems.
• Partner with Corporate Security Engineering leadership and Vulnerability Management to ensure configuration controls and remediation efforts are aligned, measurable, and enforceable.
• Continuously improve security configurations by reducing drift, expanding automation, and strengthening documentation and evidence collection to support audit readiness.

Onebrief provides collaboration and AI-powered workflow software specifically for military staffs, enhancing their speed, intelligence, and efficiency. It's a remote-first company with a team of veterans and technologists, valued at $2.15B, backed by top-tier investors.

• Owns and manages the organization’s enterprise certification frameworks.
• Develop and maintain policies and procedures supporting certification frameworks.
• Support proposal teams by validating and documenting certification compliance.

Lynker Corporation is a leading provider of innovative solutions in weather and climate science. They leverage cutting-edge technologies and scientific expertise to support improved operational weather forecasts. Lynker is a growing, employee-owned business specializing in professional, scientific, and technical services with a team-oriented work environment.

• Support ongoing FedRAMP authorization including SSP, POA&M, evidence, and 3PAO coordination.
• Manage and oversee NIST SP 800-53 compliance.
• Oversee continuous monitoring, vulnerabilities, incidents.

IFS is a billion-dollar revenue company with 7000+ employees on all continents. Their leading AI technology is the backbone of their award-winning enterprise software solutions, enabling customers to be their best when it really matters–at the Moment of Service™.

• Lead, scale, and secure core IT operations in a fast-growing, court-facing organization.
• Own the reliability, security, and scalability of Magna’s technology environment.
• Support enterprise clients with demanding operational, security, and audit expectations.

Magna Legal Services provides end-to-end legal support services to law firms, corporations, and governmental agencies throughout the nation. As an end-to-end service provider, they can provide strategic advantages to their clients by offering legal support services at every stage of their legal proceedings.

• Oversee the internal cybersecurity program, road map, and strategy.
• Partner with Product, Engineering, Legal, and Compliance leadership to determine risks and deploy risk management processes.
• Serve as Waymark’s HIPAA Security Officer, ensuring compliance with the HIPAA Security Rule.

Waymark is a mission-driven team transforming care for people with Medicaid benefits. They partner with communities, delivering technology-enabled, human-centered support to help patients stay healthy and thrive in Medicaid healthcare delivery.

• Act as the primary contact for IT requests via Jira and Slack.
• Own identity and access management across core systems.
• Own SOC 2 Type II IT controls: evidence collection, audits, and working with external auditors.

PolicyMe is a Canadian digital insurance solution, offering straightforward and affordable financial protection. They operate with a remote-first culture and have sold over $10 billion in insurance coverage since 2018.