HUD - POA&M Manager / Sr. ISSO at cFocus Software Incorporated | Torre

HUD - POA&M Manager / Sr. ISSO

You'll strengthen federal cybersecurity posture by managing critical remediation efforts for HUD.
Emma highlights
This highlight was written by Emma’s AI. Ask Emma to edit it.
Full-time

Legal agreement: Employment

Provide your expected compensation while applying
location_on
Remote (for United States residents)
skeleton-gauges
You have opted out of job matches in .
To undo this, go to the 'Skills and Interests' section of your preferences.
Review preferences
Shared by
Emma of Torre.ai
about 1 month ago

Requirements and responsibilities


Job DescriptioncFocus Software seeks a POA&M Manager / Sr. ISSO to join our program supporting Housing and Urban Development (HUD). This position is remote. This position requires a Public Trust clearance.QualificationsBachelor’s degree in Cybersecurity, Information Technology, or related field.10+ years of experience in ISSO, cybersecurity compliance, or risk management roles.Experience managing POA&Ms in federal environments.Strong knowledge of NIST RMF, FISMA, and federal compliance frameworks.DutiesDevelop, manage, and maintain POA&Ms for audit findings, vulnerabilities, and security deficiencies.Track remediation activities from identification through closure, ensuring accountability and timeliness.Coordinate with system owners, engineers, SOC teams, and stakeholders to resolve POA&M items.Review and validate corrective actions to ensure effectiveness and compliance with federal standards.Support audit activities by documenting findings, preparing responses, and maintaining audit evidence repositories.Track and manage Notice of Findings and Recommendations (NFRs) and ensure remediation is documented and completed.Maintain POA&M tracking within systems such as ServiceNow and audit tracking platforms.Provide regular reporting on POA&M status, risk posture, overdue items, and remediation trends.Develop and maintain audit dashboards and reports reflecting compliance status and remediation progress.Support risk acceptance processes and coordinate documentation for residual risk decisions.Ensure POA&Ms align with NIST RMF, FISMA, and federal cybersecurity mandates.Participate in continuous monitoring activities, including vulnerability management and control assessments.Assist in preparation and execution of FISMA and financial system audits.Serve as a liaison between auditors and technical teams to ensure timely and accurate responses.Conduct follow-up assessments to validate sustained compliance after remediation efforts.
Optionally, you can add more information later (benefits, pre-screening questions, etc.)
check_circle

Payment confirmed

A member of the Torre team will contact you shortly

In the meantime, continue adding information to your job opening.