Security Compliance Operations Specialist

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Offer daily operational guidance for the security aspect of identity and access management initiatives.

• Educate teams on security compliance practices.

• Create support materials and enhance existing and future procedures.

• Work in partnership with Governance, Risk, and Compliance teams as well as business stakeholders.

• Design and implement new and revised business processes for Compliance Operations.

• Formulate and suggest strategies to reduce company risk.

• Act as a primary contact for both internal and external customer service inquiries.

• Function as a subject matter expert in financial auditing practices.

• Prepare and review audit documentation prior to presentations for management.

• Collect and organize data to plan for audits and special evaluations.

• Supervise the review of exceptions to established policies and standards.

• Lead kickoff, closing, and client meetings; share insights and conclusions.

• Assist with the annual Sarbanes-Oxley certification process and other federal mandates.

• Head control reviews and engage in control-environment enhancement projects.

• Monitor, assess, train, motivate, and mentor direct reports.

• Build management relationships and serve as a controls expert or consulting resource.

• Implement suggestions to fortify internal controls, mitigate fraud, and enhance operational processes.

• Collaborate across functions with Architects, Engineers, Product Owners, and Security Specialists.

• Execute service reports and collect metrics data.

• Document modifications, enhancements, and lifecycle events.

⛳️ Requirements

• Bachelor’s Degree in Computer Science, Business Computer Systems, Management Information Systems, or a high school diploma with 10+ years of relevant experience.

• Familiarity with ServiceNow.

• Knowledge of SOX, NIST publications, and CMMC requirements.

• Candidates for employment in the US must possess work authorization that does not currently or in the future necessitate visa sponsorship for employment authorization in the United States.

• Capability to identify and address technical issues across various platforms, applications, and systems, and devise solutions for problem resolution according to standardized procedures.

• Experience with Linux/Unix, Windows, scripting with programming languages such as Bash, PowerShell, Perl, SQL, LDAP, and web services.

• Experience with Privileged Access Management (PIM / PAM), Single Sign-On (SSO), and Multi-Factor Authentication (MFA).

• Certifications: Security +, CISSP, CEH, CISA, CRISC, CISM.

🏝️ Benefits

• Collaborative and supportive community.

• Practical, hands-on experience.

• Opportunities for certifications.

• Industry-specific training.

• Reasonable accommodations for disabilities or religious practices.

• Equal employment opportunity and affirmative action employer.