Information Security Officer - Remote

Eden Prairie, Minnesota (United States) Overview In this role you drive security governance and compliance for Optum Serve, aligning security programs with government frameworks and client needs. You will partner with IT, security, and business teams to implement controls, maintain ATOs, and manage risk across cloud and on-premises environments. You'll own security documentation, from SSPs to POAMs, and coordinate audits and penetration testing. This position offers remote work within the U.S. and a pathway to impact at scale in healthcare technology. Compensation / Benefits comprehensive benefits package equity stock purchase 401k contribution incentive and recognition programs remote work flexibility telecommuter policy compliance Responsibilities Serve as SME for information security governance, risk management, and compliance per the NIST RMF Collaborate with Business and IT groups across security design, planning, implementation, and monitoring Create and maintain standard operating procedures with cross-functional teams Demonstrate strong understanding of cloud models and cloud management Maintain knowledge of security architecture, OS, databases, networks, applications, and security tools Apply regulatory frameworks (NIST 800-53/171, CMMC, FedRAMP, RMF) and STIGs in ATO processes and POAM management Develop and maintain security documentation (SSP, Contingency Plans, Configuration Management, Disaster Recovery) Lead vulnerability discussions and coordinate remediation and documentation Coordinate third-party audits and oversee annual penetration tests Key requirements Bachelor's degree in information security, Cybersecurity, Computer Science, or equivalent 5+ years of information security experience 3+ years of FISMA experience 3+ years of A&A and IV&V experience Strong knowledge of NIST 800-53, 800-171, CMMC, FedRAMP, RMF Experience with STIGs and ATO/POAM processes US Citizenship Eligibility for security clearance (confidential/secret or higher) CISSP or CISM certification preferred 10% travel US-based remote work compliant with Telecommuter Policy cross-functional collaboration effective communication risk-based decision making NIST RMF and risk management NIST 800- CMMC and FedRAMP