United States onlyQualifications:
- Bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, or related field.
- 6+ years of experience in cybersecurity compliance, audit, or risk management roles.
- Experience supporting federal compliance frameworks (FISMA, NIST RMF, FedRAMP).
- Experience with audit processes, documentation, and evidence collection.
- Lead cybersecurity compliance efforts aligned with federal standards including FISMA, NIST SP 800-53, OMB, CISA directives, and HUD policies.
- Oversee development, implementation, and maintenance of compliance frameworks, policies, and procedures.
- Manage audit readiness activities including FISMA audits, internal reviews, and third-party assessments.
- Coordinate audit requests, collect evidence, and track audit artifacts in centralized systems.
- Serve as primary liaison with auditors and stakeholders during audit engagements.
- Develop and maintain Plans of Action and Milestones (POA&M) to remediate findings.
- Track and manage Notice of Findings and Recommendations (NFRs) through remediation lifecycle.
- Ensure proper documentation, storage, and retrieval of compliance artifacts and evidence.
- Support Assessment & Authorization (A&A) processes and Risk Management Framework (RMF) activities.
- Develop risk acceptance documentation and support accreditation packages.
- Monitor compliance posture and report on risks, gaps, and remediation progress.
- Ensure continuous compliance monitoring and alignment with evolving federal mandates.
- Provide compliance reporting including monthly, quarterly, and annual status reports.
- Support development of SOPs, governance documentation, and compliance strategies.
