Description

You will manage security compliance and risk assessment for internal and cloud-based systems.

This role is on-site.

Responsibilities

• Execute the NIST Risk Management Framework (RMF) to conduct security control assessments and identify control gaps.
• Generate and maintain SA&A documentation, including System Security Plans, Security Assessment Reports, and Risk Assessments.
• Prepare Security Impact Assessments, Authorization Packages, and official memorandum documentation.
• Identify, prioritize, and track risks through Plans of Action and Milestones (POA&M) until closure.
• Manage remediation efforts for vulnerabilities identified via security scanners and coordinate third-party IT audits.

Required Skills

• 10+ years of experience in Information Security.
• 5+ years of experience building and managing Windows server platforms.
• Expertise in the NIST Risk Management Framework (RMF).
• Thorough knowledge of NIST 800 Special Publications and Federal Information Processing Standards (FIPS).
• Experience with FedRAMP compliance for cloud-based systems.
• Proficiency using security scanners such as Nessus or Nexpose for vulnerability remediation.
• Ability to collect evidence and artifacts to support security findings and compliance reporting.

Preferred Skills

• Bachelor's degree in Computer Science or a related engineering field with information security training.

Key Skills

Education

Bachelor's degree