Cyber Security Audit and Compliance Specialist

Cyber Security Audit and Compliance Specialist

POP: 12+ months

Location: Remote

SCOPE

Information about existing security products, authorized vulnerability management policies, and procedures. Evaluate security requirements and conducts feasibility studies to examine software and hardware requirements, administration costs, and data information flow. Assists with the Security Controls Auditor in validating the security controls and the Risk Management Framework. Develops and maintains cyber security policy to comply with requirements. Plan and schedule cyber project activities and monitors and reports project progress. Work with customers to implement system security measures, assists with cyber security plans and documentation and provides technical guidance and training. Conduct an analysis of system vulnerability management, remediation solutions, and develop the necessary POAMs. Collaborate with internal and/or external security teams regarding audits and security controls. Evaluate, tests, monitor, and maintain information security policies, procedures and systems such as hardware, firmware, and software. Ensure security design, controls, and procedures are aligned with information security standards and are appropriate to mitigate risk of exposure. Identifies security violations, determines cause, and implements procedures to prevent future incidents.

Minimum Education/Qualifications:

Six (6) years of experience in Information security with cyber security, security programs, or compliance assurance.

Six (6) years of experience with Security Information and Event Management (SIEM).

Bachelor s or associate degree in Computer Science, Math, Information Technology, Engineering, or related field or at minimum IT Certification. Six (6) years' experience is equivalent to three (3) years of education.

Six (6) years of experience in RMF.

SECRET Clearance required.

Basic knowledge of the following: Active Directory, UNIX, Windows, Relational Databases.

Knowledge of NIST special publications and accreditation and authorization process.