cism jobs in San Diego

As a Technical Compliance Manager Intern at Intuit's CTREC organization, you will support risk analysis, security controls monitoring, and GRC (Governance, Risk, and Compliance) initiatives across frameworks like SOC 2, ISO 27001, ISO 42001, and PCI DSS. You'll help operationalize security policies, analyze internal controls, and manage action plan programs using tools like ServiceNow and Claude.…See more The role requires balancing deep technical control analysis with broader risk assessment and executive communication, with hybrid work in San Diego.

Engineering Manager II leading Oracle Cloud security assessments and implementations across ERP, HCM, and SCM modules. Responsible for designing role-based access controls, segregation of duties, and Oracle Risk Management Cloud capabilities (Advanced Access Controls, Advanced Financial Controls, Financial Reporting Controls).…See more Will manage multi-release, multi-country programs including design workshops, scope, budget, resources, and quality oversight, while guiding teams in developing reusable accelerators and collaborating with stakeholders on security strategy and operational transitions.

Lead cybersecurity strategy and transformation initiatives for enterprise clients as a Manager at Deloitte's Cyber team. Manage project workstreams, coach teams, and develop executive-level analyses and recommendations that address complex business challenges around cyber programs, governance, risk assessments, and enterprise change.…See more Collaborate across stakeholders to drive alignment, oversee high-quality deliverables, and support business development and practice growth in a consulting environment.

The Cybersecurity Engineer III will support Assessment and Authorization accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, and identifying vulnerabilities with remediation recommendations. The role requires deep knowledge of the Risk Management Framework and involves testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing A&A documentation including System Security Plans, Security Assessment Plans, and Security Assessment Reports.…See more Responsibilities include managing eMASS scheduled tasking, quarterly STIG checks, annual security reviews, and maintaining DISA circuit connections and system inheritance workflows. The candidate must hold or obtain a Secret clearance and possess one of several IAM Level II certifications (CASP+, CAP, CISM, CISSP, or GSLC) with 10+ years of cybersecurity or incident response experience.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. The role requires deep expertise in the Risk Management Framework, including designing and tailoring security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing comprehensive A&A documentation (SSP, SAP, SARs).…See more Responsibilities include adherence to eMASS scheduled tasking, quarterly IV&V and STIG checks, annual security reviews, monthly POA&M updates, and managing DISA circuit connections and inheritance workflows. The position requires 10+ years of cybersecurity or incident-response experience and one of several security certifications (CASP+, CAP, CISM, CISSP, or GSLC).

Manage cybersecurity and operations of multiple classified systems, including development and maintenance of enterprise-wide RMF security policies, continuous monitoring, and compliance with federal and DoD standards. Lead and mentor security personnel while overseeing System Security Plan creation, security audits, incident investigation, and risk assessments across complex networks and systems at multiple classification levels.…See more Maintain DoD 8570.01-M certification (CISSP, CISM, CCISO, or GSLC) and an active TS/SCI clearance, with 10+ years of professional experience in classified government environments.

Senior Manager leading IT audit and technology risk assurance work at a Big Four accounting firm. Responsibilities include planning and executing IT audits, reviewing controls and financial reporting environments, supervising managers and senior associates, and ensuring compliance with auditing standards and methodologies.…See more Requires 8+ years of IT audit/information systems experience, CPA or CISA/CISM/CRISC/CGEIT/CISSP/CFE certification, and proficiency with Microsoft Office and ERP applications.

Director-level role managing data center operations, infrastructure, and associated teams at a healthcare organization. Responsible for on-premises and hybrid infrastructure environments, network architecture, disaster recovery, business continuity, compliance with healthcare/security regulations, and supervising assigned staff.…See more Requires 10+ years of data center/infrastructure experience, 8+ years in supervisory roles, and demonstrated expertise in enterprise networking, cloud platforms, virtualization, and IT service management.

Senior Cyber Systems Engineer responsible for developing and maintaining RMF artifacts (SSPs, SARs, SAPs, POA&Ms), coordinating with Navy Authorizing Officials and Security Control Assessors, and managing cybersecurity authorization packages for ATO/IATT/IATO activities. The role involves vulnerability remediation, STIG compliance, access control policy development, patch management, and server/network infrastructure oversight.…See more Requires mastery of the Risk Management Framework, CI/CD security pipelines, container hardening (Docker/Kubernetes), infrastructure-as-code tools (Terraform, Ansible), and automated security assessment tools (ACAS/Nessus). Serves as Information Systems Security Manager (ISSM) for product ATOs and coordinates with government agencies to ensure DoD and Navy cyber security requirements are met.

Lead information systems security for a cleared defense contractor, managing a team of ISSOs and Security Administrators through the RMF process while ensuring compliance with NISPOM, DCSA, and NIST 800-53 standards. Responsibilities include vulnerability management, STIG compliance, security incident investigation, insider threat coordination, and preparation for DCSA assessments.…See more Requires 8+ years IT experience with 5+ years as an ISSM in a cleared facility, proficiency in Windows/Linux, eMASS, Tenable, SIEM tools, and IAM Level 3 certification (CISSP, CISM, or GSLC). Strong background in container orchestration, infrastructure automation, and DevSecOps methodologies is valued.

Lead a team of security engineers (staff, senior staff, principal levels) owning product security across Intuit's ecosystem, including security reviews, design consults, and risk evaluations. Transform security processes from manual to automation/agent-first, defining baseline controls and security standards for cloud platforms (AWS, GCP, Azure) while raising the bar for AI/agentic systems.…See more Partner with business and engineering leaders to surface risks early, inform decisions, and drive adoption of security controls across large organizations. Requires 8+ years in security engineering, 3+ years managing managers, deep technical expertise in application security and threat modeling, and demonstrated experience rebuilding security programs with hands-on automation.

Serve as an independent, third-party cybersecurity assessor and RMF (Risk Management Framework) team lead for Navy systems under the NSWC Corona CCAM contract. Execute comprehensive security assessments of IT, PIT, and OT systems against DoD and NAVSEA standards; validate NIST 800-53 control implementations; analyze vulnerability data and STIG compliance; generate Security Assessment Reports and Risk Assessment Reports; and provide mentorship to ISSMs and ISSOs.…See more Requires NQV Level III certification, active TS/SCI clearance, seven years of cybersecurity experience with four years in RMF assessments, and DoD 8570 IAM Level II/III baseline certification.

Lead cybersecurity operations for Naval Surface Warfare Center Corona enclaves and Platform IT systems, owning the complete Risk Management Framework (RMF) Authorization to Operate process under DoD Instruction 8510.01. Oversee ISSOs and System Administrators, develop and maintain System Security Plans, Security Assessment Reports, and Risk Assessment Reports, and manage eMASS records for continuous compliance monitoring.…See more Direct incident response, enforce configuration management policies through Change Control Boards, and conduct STIG/ACAS/SCAP compliance reviews. Requires TS/SCI clearance, Master's in Computer Science/Cybersecurity or equivalent, 8+ years cybersecurity experience, and current DoD 8140/8570 Level III certification (CISSP, CISM, CASP+, or equivalent).

Senior manager responsible for leading Deloitte's identity and access management (IAM) managed services delivery across multiple client accounts. The role requires 10+ years of IAM experience with 5+ years in managed services or IT operations leadership, hands-on expertise with platforms like SailPoint, CyberArk, Okta, or Entra ID, and the ability to drive service improvement through automation and modernization.…See more Responsibilities include account ownership, executive governance, financial performance management, team mentorship, and business development activities such as contract renewals and proposal response.

Information System Security Officer III responsible for securing assigned networks, enclaves, and platform IT systems through vulnerability assessments, STIG compliance verification, and continuous monitoring. The role requires coordinating with engineers and developers to embed security throughout the system development lifecycle, managing RMF documentation and POA&M entries, conducting daily audit log and SIEM alert reviews, and supporting incident response and cyber inspections.…See more Must possess TS/SCI clearance, a bachelor's degree in IT/cybersecurity or equivalent experience, six years of hands-on security implementation and vulnerability analysis, and current DoD 8140/8570 IAM Level II certification.

The IT Manager will lead all IT infrastructure, cybersecurity, and regulatory compliance operations for a healthcare organization. Key responsibilities include designing and maintaining secure cloud, network, and endpoint systems; serving as the HIPAA compliance authority; establishing incident response procedures; managing vendor and third-party risk; and providing executive advisory on technology strategy and risk.…See more The role demands extensive IT/cybersecurity leadership experience, deep HIPAA and healthcare data-protection expertise, and the ability to build compliance frameworks and security controls from the ground up.

Senior IT Cyber Security Specialist responsible for enterprise vulnerability scanning, system hardening, and patch management using tools like Nessus and HBSS. Administers security technologies including SIEM platforms, firewalls, endpoint protection, and VPNs while investigating security incidents and performing root cause analysis.…See more Requires 7+ years of progressive IT/cybersecurity experience in DoD or defense contractor environments, with strong Linux administration and Bash scripting skills. Must hold DoD 8570.1-M IAM Level III certification (CISSP, CISM, or GSLC) and maintain compliance with NIST SP 800-171, CMMC Level 2, and DISA STIGs.

Lead ServiceNow Developer responsible for designing, implementing, and architecting enterprise ServiceNow solutions for federal government clients. Design security plans ensuring compliance with NIST, RMF, and DoD standards; mentor and coach ServiceNow talent; lead knowledge sharing; and drive client relationships and business growth through solution proposals and platform expertise.…See more Must have 5+ years of ServiceNow implementation/architecture experience, ServiceNow Certified System Administrator certification, and one of CISSP/Security+/CASP+/CISM, with active Secret Clearance required.

This role involves conducting comprehensive security assessments of AI systems and deployments, evaluating them against NIST frameworks (AI RMF, CSF, 800-53, 800-171) and other security standards. The consultant will identify AI-specific risks such as prompt injection, model misuse, data leakage, and supply-chain vulnerabilities across cloud platforms (AWS, Azure, hybrid).…See more Responsibilities include developing AI governance frameworks, policies, and controls; assessing AI development environments, model pipelines, APIs, and orchestration layers; and delivering executive-level recommendations and remediation roadmaps. Requires 7+ years of cybersecurity/consulting experience and 3+ years supporting AI/machine learning security initiatives, with strong expertise in AI threat modeling, secure AI deployment, and governance frameworks.

Lead the design, implementation, and optimization of ServiceNow solutions for enterprise clients, including platform architecture, system integrations, and performance tuning. Provide technical oversight throughout the delivery lifecycle, ensure compliance with security standards and best practices, and mentor junior developers.…See more Manage stakeholder relationships, contribute to business development by identifying new service opportunities, and stay current with ServiceNow platform developments and industry trends.

Lead the security architecture for satellite onboard systems, designing secure boot chains, attestation mechanisms, and trust boundaries across hardware, firmware, and payload compute. You will conduct threat modeling, implement Hardware Root of Trust solutions (TPM, secure elements, eFuse), manage firmware signing processes, and develop incident response procedures for onboard system compromise.…See more The role requires close collaboration with hardware and firmware teams to embed security best practices throughout the platform development lifecycle, plus mentoring and recruiting for the security organization.

Director of IT seeking an experienced leader to oversee IT governance, compliance, and risk management for a biotech company. Responsibilities include drafting and maintaining IT policies aligned with regulations (GDPR, HIPAA, ISO 27001, FDA 21 CFR Part 11, SOX), leading internal and external audits, conducting risk assessments, developing IT quality management systems, and managing an IT team and budget.…See more The role requires 8+ years of IT experience with 3+ years in leadership, strong technical writing ability, and expertise in cloud platforms, network security, and data privacy.

Principal Security Engineer (ISSM) responsible for overseeing information security program implementation, managing cybersecurity strategy, personnel, and infrastructure across Navy acquisition programs. The role involves assessing cyber posture, identifying and monitoring security vulnerabilities and risks, recognizing recurring trends across multiple programs, and translating findings into actionable remediation recommendations.…See more Requires 7+ years of cybersecurity/ISSM experience, a graduate degree in a related field, and current GSLC, CISSP, CISM, CAP, or CASP certification with active DoD Secret clearance and eligibility for Top Secret.

As an IT Audit Assurance Intern, you will deliver IT audit services to clients, testing and assessing information systems controls in support of financial statement audits. You will work with Partners, Managers, and Senior Executives to identify security and risk management issues, apply knowledge of IT trends and systems processes, and gain comprehensive understanding of client operations.…See more The role requires information security training or experience, strong technical aptitude, and proficiency in Microsoft Office suite applications.

Design, implement, and maintain security policies and enforcement capabilities across on-premises and cloud environments. Serve as a cybersecurity technical advisor to cross-functional teams, consulting on business and technical requirements, risk assessment, and security architecture.…See more Lead implementation of enterprise security technologies, identify automation opportunities, and evaluate emerging threats and solutions to strengthen organizational security capabilities. Requires 7–10 years of progressive cybersecurity experience with expertise in security architecture, solution design, and technical leadership.