Security Compliance Specialist

Need resume, MMDD / Last 4 and linked in. Also DL (if a GC then a copy of the GC also)




Job Description
Role Title: Security Compliance Specialist




Required Skills: Vulnerability/Patch Management: Intermediate, NIST 800-53: Advanced, System Security Plan: Advanced, Cyber Assessment: Advanced, Cloud Security: Foundation




Responsibilities: Develop, update, and maintain System Security Plans (SSPs) for State Government client systems.




Apply NIST SP 800 53, NIST RMF, and related frameworks (e.g., FedRAMP, StateRAMP, CJIS) to assess and document system security posture.
Conduct security control assessments and gap analyses, mapping findings to compliance requirements.
Prepare privacy documentation, including Privacy Impact Assessments (PIAs) and data handling policies.
Support Authorization to Operate (ATO) packages and coordinate with system owners, ISSOs, and auditors.
Track plans of action and milestones (POA&Ms) and monitor remediation progress.
Maintain audit ready documentation and evidence libraries for compliance reviews.
Review vulnerability scan results (e.g., Nessus, Qualys, Tenable, Veracode) and translate findings into risk ratings and POA&M entries.
Support cloud security compliance documentation for environments such as Azure Government or AWS GovCloud.
Use GitHub or similar tools to track documentation changes and collaborate with technical teams.
Leverage AI tools to research and troubleshoot technical and compliance issues.
Work with development, IT, and project teams to gather system information for compliance documentation.
Clearly document findings, procedures, and remediation plans for technical and non technical stakeholders.
Participate in discovery sessions and provide input on compliance impact during sprint planning.
Mentor junior team members on compliance documentation practices.
Stay current with NIST and other evolving security and privacy frameworks.
Preferred experience with GitHub Copilot and vulnerability scan tools such as Veracode.