Risk, Compliance, and Quality Assurance Specialist / SME :: Washington, DC (Hybrid)

Risk, Compliance, and Quality Assurance Specialist / SME

Location: Washington, DC (Hybrid)

Duration: 6+ months

Day-to-Day Responsibilities:

• Ensure ICAM solution is compliant with security, policy, privacy, and legal requirements.
• Oversee solution lifecycle for compliance, auditability, and ATO readiness.
• Embed risk management, compliance validation, and quality controls into delivery activities.
• Maintain Security and Compliance Framework, including data protection and security logging.
• Prepare security and compliance artifacts for review and approval.
• Support ATO activities by validating controls and identifying mitigation strategies.
• Define and enforce quality assurance processes and test governance.
• Develop and review QA testing plans and ensure documentation for Government review.
• Coordinate User Acceptance Testing (UAT) with stakeholders.
• Monitor and report vulnerabilities, open findings, and mitigation timelines.
• Support vulnerability assessments, security hardening, and disaster recovery testing.
• Review configuration changes and incident reporting to ensure compliance.
• Contribute to ongoing risk monitoring and compliance reviews post-implementation.
• Support training and transition activities by documenting compliance controls and practices.

Required Qualifications:

• Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or related field.
• 8–12 years of experience in ICAM, cybersecurity, or enterprise architecture.
• Relevant certifications such as CIPP/G, CISA, CRISC, or CISSP.
• Experience in risk management, compliance, quality assurance, or ICAM/IAM.
• Experience developing compliance and assurance artifacts.
• Experience supporting structured testing disciplines.
• Experience with security and compliance processes in cloud-based environments.
• Ability to coordinate with various stakeholders to enforce quality and compliance standards.

Preferred Qualifications:

• Experience in highly regulated environments with audit expectations.
• Experience with ATO readiness and vulnerability management.
• Familiarity with compliance integration into SIEM and configuration management controls.
• Experience with ICAM platforms like Okta, SailPoint, and Microsoft Entra ID.