Control Validation Security Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct IT audits on intricate information systems, applications, and enclaves to ensure that controls are in place, properly implemented, and adhere to Federal and DoD standards.

• Assess the necessary level of security.

• Execute procedures designed to safeguard information system assets against intentional or unintentional access or destruction.

• Provide guidance and support regarding audit readiness issues that involve new methodologies, precedents, or interpretations of laws, regulations, or past practices.

• Assist with the Financial Statement Audit, Annual Statement of Assurance, SSAE-18 Audit, and Audit Logging eOPR.

• Deliver technical assistance for vulnerability assessments, risk assessments, network security, and the implementation of security measures.

• Conduct technical evaluations of customer systems and aid in security enhancements.

• Perform cybersecurity control validation exercises on unclassified networks, applications, and systems.

• Balance business requirements with security concerns and evaluate mitigations against security obligations.

⛳️ Requirements

• A minimum of two (2) years of experience with DoD 8500.2 or NIST SP 800-53, along with a solid understanding of risk management framework principles.

• Strong analytical and problem-solving capabilities for addressing security challenges.

• Proficient in Microsoft Excel, Access, and the Microsoft Office suite, including Word and PowerPoint.

• Familiarity with the Enterprise Mission Assurance Support Service (eMASS).

• Understanding of how to balance business needs against security concerns.

• Experience in analyzing mitigations related to security requirements.

• Knowledge of RMF (800-53 rev5).

• Experience in technical report writing and providing evidentiary support for findings and recommendations.

• Possession of a relevant certification from a nationally recognized authority.

• DoD Approved 8570 Baseline Certification: Category IAM-I or at least IAT-II.

• Prior experience as a SCAR or Auditor is preferred.

• An associate degree or higher is preferred.

• Previous experience with FISCAM 2024 is a plus.

• Knowledge of Enterprise Log Management Systems is advantageous.

🏝️ Benefits

• Meaningful work.

• Growth opportunities.

• Work-life balance.

• A collaborative workplace culture.

• Lunch & Learn sessions.

• Enjoyable group activities, including escape rooms and miniature golf.

• Exceptional efforts recognized and rewarded.