ZipRecruiter

Log In

2

Remote Cism Jobs in Tennessee (NOW HIRING)

VIVOS HOLDINGS

SR CYBERSECURITY ENGINEER

Smyrna, TN · On-site +1

Support secure remote access and vendor access controls for manufacturing support scenarios ... Security certifications such as CISSP, CISM, GIAC/GICSP, Security+, or Microsoft Security ...

Dollar General

IT Security Engineer SR

Goodlettsville, TN · Remote

$107K - $147K/yr

In-depth understanding of PKI, VPN/remote access technologies (CyberArk Alero, GlobalProtect), and ... CISSP, CISM, CISSP-ISSAP, Palo Alto PCNSE, Splunk Certified Architect, or GCP Cloud Security ...

All JobsCism JobsRemote Cism JobsRemote Cism Jobs in Tennessee

Remote Cism information

See Tennessee salary details

$15

$19

$21

How much do remote cism jobs pay per hour?

As of Aug 4, 2026, the average hourly pay for remote cism in Tennessee is $19.52, according to ZipRecruiter salary data. Most workers in this role earn between $16.35 and $20.72 per hour, depending on experience, location, and employer.

What are the main challenges faced by professionals in a Remote CISM role?

As a Remote CISM, one of the main challenges is maintaining effective oversight and coordination of security policies across diverse, distributed teams and systems. Communicating complex security requirements to non-technical stakeholders, handling real-time incident responses remotely, and staying up-to-date with rapidly evolving cyber threats can also be demanding. However, strong collaboration tools, clear processes, and proactive engagement with IT and business teams make these challenges manageable. Remote CISMs often need to adapt quickly and foster a strong security culture despite not being physically present, which can build valuable leadership and influence skills for career advancement.

What are the key skills and qualifications needed to thrive in the Remote CISM position, and why are they important?

To thrive as a Remote CISM (Certified Information Security Manager), you need a solid background in information security governance, risk management, and incident response, supported by a relevant degree and the CISM certification. Familiarity with security frameworks such as ISO 27001, NIST, and proficiency in tools for risk assessment, SIEM, and compliance tracking are critical. Strong communication, leadership, and analytical thinking skills help in coordinating with remote teams and managing security projects effectively. These competencies are essential for ensuring robust information security controls and for successfully mitigating cyber risks in a distributed work environment.

What is a Remote CISM?

A Remote CISM (Certified Information Security Manager) job involves overseeing and managing an organization's information security program from a remote location. Responsibilities typically include developing security policies, assessing risks, ensuring compliance, and leading incident response efforts. Remote CISM professionals collaborate with teams to protect sensitive data and mitigate cybersecurity threats while working outside of a traditional office setting. Strong communication skills, strategic planning, and knowledge of industry standards like ISO 27001 and NIST frameworks are essential.

What are popular job titles related to Remote Cism jobs in Tennessee? For Remote Cism jobs in Tennessee, the most frequently searched job titles are:
What job categories do people searching Remote Cism jobs in Tennessee look for? The top searched job categories for Remote Cism jobs in Tennessee are:
What cities in Tennessee are hiring for Remote Cism jobs? Cities in Tennessee with the most Remote Cism job openings:
Remote Cism jobs near you
Infographic showing various Remote Cism job openings in Tennessee as of July 2026, with employment types broken down into 100% Full Time. Highlights an 100% Remote job distribution, with an average salary of $40,592 per year, or $19.5 per hour.

Senior FedRAMP Consultant (GRC Analyst III)

C2 Labs, Inc.

Knoxville, TN • Remote

Contractor

Posted 24 days ago

Job description

C2 Labs is hiring a Senior FedRAMP Consultant (GRC Analyst III equivalent) to act as a lead technical writer for FedRAMP authorization packages and ongoing ConMon operations. If you can translate real-world cloud security implementations into crisp FedRAMP documentation—and you care about making ConMon sustainable—this is a strong fit.

What you’ll do

• Lead drafting of FedRAMP artifacts (20X KSI summaries and/or legacy SSP/policies/plans) and drive iterations to completion.

• Maintain control/KSI-to-evidence traceability in RegScale and keep the evidence library audit-ready.

• Partner with cloud architecture/security engineering resources to ensure technical accuracy.

• Support assessor/sponsor readiness: walkthroughs, responses, and updates.

Role summary

Lead author and coordinator for FedRAMP documentation and evidence traceability. This role functions as a technical writer with security and cloud fluency—able to capture architecture and control/KSI implementations from engineering teams and translate them into FedRAMP artifacts. The Senior Consultant owns the quality of first drafts and mentors junior writers.

Key responsibilities

• Lead customer interviews/workshops to capture system boundary, data flows, shared responsibility model, and control/KSI implementations.

• Draft and iterate FedRAMP artifacts (e.g., 20X KSI implementation summaries and/or legacy SSP sections, policies, and plans).

• Build and maintain traceability between controls/KSIs, evidence, validation methods, and ConMon cadence in RegScale.

• Coordinate evidence collection and organize artifacts into a clean evidence library aligned to the package structure.

• Partner with the Cloud Architect and Security Engineer to ensure technical accuracy of narratives and diagrams.

• Support assessment readiness: conduct package walkthroughs, respond to questions, and update artifacts based on feedback.

• Mentor Junior Consultants on writing standards, template fidelity, and evidence hygiene.

Key deliverables / outputs

• FedRAMP first drafts of major package artifacts (KSI summaries and/or SSP sections).

• Policy and plan artifacts aligned to FedRAMP expectations (e.g., IRP, CP, CMP, ISCM, Rules of Behavior as required).

• Control/KSI-to-evidence traceability in RegScale with validation cadence documented.

• Assessment-ready evidence library with consistent naming/versioning and completeness checks.

Required qualifications

• 5+ years experience in GRC/compliance, security documentation, or audit support roles.

• Security certification (CISSP, CISM, CCSP)

• Demonstrated technical writing capability: can produce clear, consistent narratives for complex systems and controls.

• Working knowledge of NIST 800-53 controls and evidence expectations; familiarity with FedRAMP package structure and templates.

• Comfort collaborating with engineers and architects to accurately describe technical implementations.

• Strong attention to detail (templates, cross-references, tables, and evidence mapping).

Preferred / nice to have

• Bachelors degree in IT, Cybersecurity, or related field

• Prior experience drafting FedRAMP SSPs and/or supporting artifacts (Low/Moderate/High).

• Experience with FedRAMP 20X concepts (KSIs, validation cycles, automation-first evidence).

• Experience working in RegScale or similar GRC tools.

• Audit-related experience.

Tools & environment

• RegScale (controls/KSIs, evidence, workflows, POA&M management)

• Microsoft Word/Excel (FedRAMP templates), Visio/Lucidchart (diagrams) as available

• Ticketing systems for remediation tracking (Jira/Azure DevOps/ServiceNow as customer uses)

Engagement details

• 1099 independent contractor (initial engagement); project-based with potential extension into ConMon operations.

• Remote-first; occasional workshops may be requested (typically minimal travel).

• No clearance required; must be able to pass a standard background check and sign NDA/SOW.

• Hours scale with customer phase (heavy during package drafting; lighter during steady-state ConMon).

EEO Statement

We are an equal opportunity employer. All qualified applicants will be considered without discrimination based on race, color, religion, sex, national origin, age, disability, or protected veteran status. Employment offers will be contingent on passing a pre-employment drug screen.

Practical AI Application

  • Applies AI tools to streamline workflows, enhance decision-making, and improve outcomes
  • Understands the strengths and limitations of AI systems and exercises sound judgment in their use
  • Continuously explores new AI capabilities and integrates them into day-to-day work where appropriate
  • Uses AI in alignment with company and customer-specific policies, data privacy standards, and ethical guidelines
  • Exercises discretion when using AI with sensitive or proprietary information
  • Demonstrates awareness of bias, accuracy, and risk considerations when leveraging AI tools