Senior Control Validation Security Specialist

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Execute validation of information system security controls and conduct IT audit activities independently across intricate systems.

• Assess the implementation and proper functioning of cybersecurity controls.

• Perform evaluations to ensure that controls adequately safeguard against unauthorized access.

• Confirm adherence to cybersecurity policies and standards.

• Assist in the RMF authorization process and carry out technical reviews of RMF documentation.

• Undertake continuous monitoring and vulnerability assessments.

• Record findings in formal reports and create technical documentation.

• Collaborate with management to address cybersecurity challenges and enhance compliance.

⛳️ Requirements

• Possession of current DoD 8670.01/8140 IAM Level III certification, which may include one or more of the following: ISACA CISM, ISC2 CISSP, GIAC/SANS GSLC, EC-Council CCISO.

• A minimum of 3 years of experience with DoD cybersecurity policy (DoD 8500-series or NIST SP 800-53).

• At least 2 years of experience using eMASS for RMF authorization processes and security documentation.

• Capability to conduct IT audits and validate security controls in complex enterprise settings.

• Strong analytical abilities and problem-solving skills.

• Proficiency in Microsoft Office applications (Excel, Access, Word, PowerPoint).

• In-depth knowledge of network architecture and security implementation.

• Excellent written and verbal communication skills.

🏝️ Benefits

• Multiple healthcare coverage options, including low deductible, high deductible, and HSA-eligible plans.

• Dental coverage.

• Vision coverage.

• Accident and illness insurance.

• Short- and long-term disability coverage.

• 401(k) plan with an industry-leading 6% match.

• Opportunity to earn stock in BMA through the ESOP.