Manager, Information Security

Synack ’s Penetration Testing as a Service platform manages customers’ attack surfaces by discovering new assets, pentesting for critical vulnerabilities and gaining visibility into the root causes of security risks. We are committed to making the world more secure by harnessing a talented, vetted community of security researchers to deliver continuous penetration testing and vulnerability management, with actionable results. Synack 's PTaaS platform has uncovered more than 71,000 exploitable vulnerabilities to date, protecting a growing list of Global 2000 customers and U.S.

agencies in a FedRAMP Moderate Authorized environment. For more information, please visit .

We are looking for a talented Information Security Compliance Manager with deep expertise in ISO, SOC, CMMC and FedRAMP compliance. You will work closely with the Product, Engineering, and Operations teams to ensure proper security controls and monitoring are applied. Sounds interesting? Keep reading…

• *Please note that due to federal government contract requirements, we can only hire a citizen of the United States into this role.

• Here’s what you'll do
• Automate generation of System Security Plans (SSP), including Security Concept of Operations, Risk Management Matrix, Security Control Traceability Matrix, and conduct Security Impact Analysis (SIA) on major system changes.
• Develop and maintain automated Plans of Action and Milestones (POAMs).
• Contribute to the adoption and implementation of automation and us