cisa jobs in San Diego

Senior Manager leading IT audit and technology risk assurance work at a Big Four accounting firm. Responsibilities include planning and executing IT audits, reviewing controls and financial reporting environments, supervising managers and senior associates, and ensuring compliance with auditing standards and methodologies.…See more Requires 8+ years of IT audit/information systems experience, CPA or CISA/CISM/CRISC/CGEIT/CISSP/CFE certification, and proficiency with Microsoft Office and ERP applications.

Cybersecurity Engineer responsible for comprehensive vulnerability management, security assessments, and risk mitigation across systems, networks, and data. Conducts STIG compliance checks, system security testing in lab and field environments, and collaborates with engineering teams on remediation prioritization and Risk Management Framework (RMF) documentation.…See more Requires Security+ certification, bachelor's degree in computer science or cybersecurity, or equivalent experience.

The Cybersecurity Awareness Associate II develops and delivers cybersecurity awareness programs, training content, and communications across the enterprise. Responsibilities include creating threat alerts and advisories, designing educational materials for diverse audiences, managing the Cyber Champion program, coordinating company-wide cybersecurity events, and maintaining the Cyber Safety SharePoint hub.…See more The role requires translating technical security concepts into business-focused guidance, measuring program effectiveness, and mentoring junior team members to strengthen organizational security culture and reduce human risk.

Director of IT seeking an experienced leader to oversee IT governance, compliance, and risk management for a biotech company. Responsibilities include drafting and maintaining IT policies aligned with regulations (GDPR, HIPAA, ISO 27001, FDA 21 CFR Part 11, SOX), leading internal and external audits, conducting risk assessments, developing IT quality management systems, and managing an IT team and budget.…See more The role requires 8+ years of IT experience with 3+ years in leadership, strong technical writing ability, and expertise in cloud platforms, network security, and data privacy.

As an IT Audit Assurance Intern, you will deliver IT audit services to clients, testing and assessing information systems controls in support of financial statement audits. You will work with Partners, Managers, and Senior Executives to identify security and risk management issues, apply knowledge of IT trends and systems processes, and gain comprehensive understanding of client operations.…See more The role requires information security training or experience, strong technical aptitude, and proficiency in Microsoft Office suite applications.

The IT Security Analyst ensures the organization's IT environment complies with internal security policies, regulatory requirements, and industry standards. Key responsibilities include preparing NIST/CIS evaluations, monitoring compliance with SOX, PCI, and other frameworks, coordinating penetration tests and security assessments, reviewing IT administrative activities for policy adherence, conducting formal audits, and maintaining compliance documentation.…See more The role requires 4+ years of IT security, compliance, and audit experience, with strong understanding of IT General Controls, access management, regulatory frameworks, and audit support processes.

Halcyon seeks a Senior Information Security Specialist to strengthen enterprise security posture through third-party risk assessment, compliance coordination, policy development, and incident response preparedness. The role involves managing vendor remediation, supporting security testing and vulnerability management, developing corrective action plans, and ensuring implementation of security controls across cloud and hybrid environments.…See more You will coordinate with MSPs, engineering, and operations teams while staying current with frameworks like SOC 2, ISO 27001, FedRAMP, and NIST 800-53. Experience in GRC, IT risk management, and regulatory compliance is required, with incident response and disaster recovery expertise valued.

The Cybersecurity Engineer III will support Assessment and Authorization accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include analyzing cybersecurity directives and policies (CTOs, FRAGOs, IAVMs, STIG requirements), developing compliance strategies aligned with federal and defense security standards, and performing risk analysis and independent verification of security configurations.…See more The role requires in-depth Risk Management Framework knowledge, FISMA data reporting support, and use of compliance tracking tools such as VRAM. This position requires a Secret clearance, IAT Level III certification (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), and 10+ years of cybersecurity or incident response experience.

As Assistant Vice President and Chief Information Security Officer, you will lead cybersecurity strategy and enterprise information security for a major integrated health system. You'll oversee a team of security analysts, engineers, and architects, manage 24/7 security operations centers, and collaborate with executive leadership to develop comprehensive security strategy aligned with organizational goals.…See more The role requires ten years of leadership/management experience with at least five in information security, plus expertise in healthcare security regulations, governance, risk management, and regulatory compliance.

The CISO will develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience, establishing governance frameworks aligned with industry standards like NIST, ISO, and SOC 2. The role requires leading threat detection, incident response, digital forensics, and vulnerability management while protecting client confidentiality and attorney-client privilege through robust technical and procedural controls.…See more The candidate must ensure secure architecture across cloud, on-premise, and hybrid environments and drive compliance with data protection and privacy regulations including GDPR, CCPA, and HIPAA. This is a senior executive position requiring 8+ years of cybersecurity experience and 6+ years in a senior leadership role managing global security programs.

Implement, assess, and authorize security controls for IT management systems under the Risk Management Framework (RMF). Conduct security reconnaissance, identify gaps, develop Plans of Action and Milestones (POA&Ms), and maintain A&A documentation (SSPs, SAPs, SARs).…See more Manage eMASS compliance, STIG assessments, and coordinate accreditation workflows. Requires 10+ years of cybersecurity experience, an active Secret clearance, IAT Level III certification (CISSP preferred), and hands-on A&A and ATO submission experience.

The Cybersecurity Engineer III will support Risk Management Framework (RMF) activities, Assessment & Authorization (A&A) processes, and continuous monitoring for DoD accredited systems. Responsibilities include developing and maintaining security documentation (SSPs, SAPs, SARs, POA&Ms), performing vulnerability assessments, managing eMASS tasking, and conducting security control validation and testing.…See more The role requires 10+ years in cybersecurity, RMF compliance, or incident response; expertise with eMASS, DISA STIGs, and vulnerability assessment tools; and an active Secret clearance with DoD 8570/8140 IAT Level III certification (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH).

Design and implement security strategies for Abbott's cloud-based applications and medical devices, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Leverage AI-assisted development tools and cybersecurity platforms to automate vulnerability analysis, evidence collection, and remediation tracking. Conduct hands-on web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools, with demonstrated experience in product security and medical device environments preferred.

Design and develop security strategies for Abbott's cloud-based medical devices and applications, including hardening, incident response, penetration testing, and disaster recovery. Apply expertise in user authentication, certificate management, digital signatures, and cloud security architecture while ensuring compliance with ISO, FDA, and regulatory standards.…See more Conduct web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, and vulnerability scanning tools. Leverage AI-assisted development and cybersecurity tools—including building agentic AI applications—to automate security deliverables, with responsibility for evaluating AI tools for safe, policy-compliant use and mitigating AI/LLM-specific risks.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, including maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), developing A&A documentation (SSP, SAP, SARs), and managing eMASS tasking throughout the accreditation cycle.…See more The role requires in-depth knowledge of the Risk Management Framework, DISA circuit connections, and cloud service provider inheritance. This position requires a Secret clearance, IAT Level III certification, and one of several advanced certifications (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), plus 10+ years of cybersecurity or incident response experience.

The Information Systems Security Manager (ISSM) will lead organizational information security strategy, frameworks, and compliance across defense and classified environments. Responsibilities include developing and maintaining security policies aligned with NIST SP 800–171, DFARS, and ISO 27001; leading CMMC and ISO 27001 certification efforts; managing CUI and classified information handling; conducting risk assessments and vulnerability analyses; overseeing incident response; and serving as the primary liaison with government agencies and customers on security compliance.…See more The role requires 7+ years of information security management experience, with 3+ years in a leadership capacity, and deep expertise in NIST, DFARS, DISA-STIGs, ISO 27001, classified information protocols, and risk governance.