Information Assurance Specialist

We are seeking an Information Assurance Specialist who will serve as the lead for security and compliance across complex, cloud-based systems supporting federal programs implementing Salesforce and AWS products. This person will ideally be a motivated and customer-oriented cybersecurity professional who will act as a key advisor to cloud program teams. This role is central to managing the full lifecycle of the Authorization to Operate (ATO), encompassing preparation, continuous monitoring, and effective risk management. Our ideal candidate is a highly motivated self-starter who possesses the vision and drive to steer our security and compliance initiatives. We are looking for someone with a strong background of previous, relevant experience who can hit the ground running and contribute to our newly founded Federal practice. Responsibilities: • Lead security and compliance activities for complex cloud-based systems or cloud programs. • Oversee ATO preparation, continuous monitoring, and risk management. • Ensure cloud solutions meet regulatory, contractual, and policy cloud and contractual requirements. • Advise cloud programs teams on security best practices. • Lead work with Government ISSOs through the ATO process. Qualifications: • Minimum of five (5) years of Federal cybersecurity experience, preferably with information assurance experience on Salesforce, AWS, or other SaaS technologies. • Experience maintaining compliance with RMF (Risk Management Framework), FISMA, NIST, and organizational security requirements. • Experience managing Plan of Action and Milestones (POA&Ms) to monitor system vulnerabilities and mitigation strategies. • Certifications: CISSP, CISM, CAP, or other relevant certifications are highly desired. • Must possess a Bachelor's Degree in cybersecurity, computer science, information technology, or related fields. • US Citizenship Required, with ability and willingness to obtain Security Clearance(s) (Secret Clearance strongly preferred) U.S. citizens are encouraged to apply. Why Thunder? Because You Deserve More Than Just a Job. • A Culture of Builders - We're a remote-first, global team of curious, collaborative problem-solvers. You'll have the opportunity to refine processes, solve challenges, and help shape the future of Salesforce and Amazon consulting. If you're excited to build, innovate, and grow, you'll fit right in. • Forge Your Own Path - At Thunder, you're not just filling a role-you're shaping it. Whether it's jumping into presales, refining our methodology, or building something entirely new, the opportunity to innovate is yours to take. Perks In Store for You: • Comprehensive Benefits with Sequoia - Medical, Dental, Vision, and Employer-Paid Life/Disability Insurance to keep you and your loved ones covered. • Ownership & Impact - Stock options in a fast-moving, high-growth company. Every employee plays a part in what we're building. Come make your mark! • Level Up Your Career - Real opportunities to grow your Salesforce and Amazon expertise through mentorship, certifications, and hands-on experience with cutting-edge technology. • Work from anywhere (well, almost ) - Enjoy the freedom of remote work, flexible PTO (with a 2-week minimum!), and generous leave policies - because the best work happens where you're happiest. • People-First Flexibility - We're always listening, evolving, and adapting. Your feedback helps shape our policies, ensuring you can thrive - professionally and personally. Research shows that women and people from underrepresented groups often apply to jobs only if they meet 100% of the qualifications. We recognize that it is highly unlikely that someone meets 100% of the qualifications for a role. If most of this job description describes you, then we encourage you to please apply for this role. Thunder is proud to be an Equal Opportunity employer, and is deeply committed to building and supporting our diverse team through inclusive, equitable hiring practices. Thunder does not accept unsolicited resumes from recruitment agencies. All resumes submitted by recruitment agencies to any employee via email, the Internet (including LinkedIn), or directly without a fully-executed search agreement will be deemed the sole property of Thunder, and no fee will be paid in the event the candidate is hired. Apply tot his job Apply To this Job