This job is closed
We regret to inform you that the job you were interested in has been closed. Although this specific position is no longer available, we encourage you to continue exploring other opportunities on our job board.
SaaS Information Security Officer
CGI - Austin, TX
posted 2 months ago
About the position
The SaaS Information Security Officer at CGI Technologies and Solutions, Inc. is responsible for ensuring the security of the CGI Advantage ERP software suite, which is a StateRAMP certified SaaS solution. This role involves collaborating with various teams to implement security controls, manage vulnerability assessments, and ensure compliance with StateRAMP protocols. The officer will also oversee change management processes and security policy exceptions, while serving as the primary contact for StateRamp-related activities.
Responsibilities
- Provide guidance and oversee the implementation of Advantage security controls.
- Serve as a vulnerability management expert, including monitoring vulnerability reviews, POAM tracking, and remediation efforts.
- Act as the primary contact to StateRamp for all POAM tracking and continuous monitoring, ensuring timely responses and updates.
- Collaborate with other Advantage teams to incorporate security controls in all phases of development, testing, and configuration processes.
- Manage the Advantage Change Management processes.
- Oversee the security policy exception processes.
- Coordinate with Engineering teams to ensure necessary security activities are performed.
Requirements
- 1-3 years experience with Containers, Kubernetes/docker, or Rancher platform.
- Proficient scripting abilities in multiple languages (Linux shell scripting, Python, Perl, and Go).
- Experience with Oracle and/or SQL Server databases and SQL DDL/DML writing.
- Experience automating IT processes (CA Autosys or similar job management tool is a plus).
- Experience with DevOps tools and techniques (e.g., Jira, Git) is a plus.
- Excellent organizational skills and ability to prioritize multiple workloads.
- Ability to work independently and collaboratively as a team lead or member.
Nice-to-haves
- Security certification such as CISM, CISA, or CISSP.
- Experience with DevSecOps processes and SDLC.
- Familiarity with NIST, FedRAMP, and/or StateRAMP protocols.
Benefits
- Competitive compensation
- Comprehensive insurance options
- Matching contributions through the 401(k) plan and share purchase plan
- Paid time off for vacation, holidays, and sick time
- Paid parental leave
- Learning opportunities and tuition assistance
- Wellness programs
