Information Security Compliance Specialist

Information Security Compliance SpecialistTactibit Technologies provides innovative information technology, cybersecurity, and cloud support services to the Federal Government. We support some of the nation's most critical and demanding projects including satellite operations, critical infrastructure, and search and rescue. We are a diverse team of hands-on professionals dedicated to solving problems and developing innovative solutions in support of our customers' critical missions. Our success is dependent on our inclusive, collaborative environment with a shared commitment to excellence in everything we do.We are looking for a talented cybersecurity professional to join our team in Suitland, MD. You will provide information security support for NOAA's satellite operations missions. You will help develop and maintain effective security and risk management programs on complex government information systems. As an Information Security Compliance Specialist, you will be expected to document security control implementations, maintain a variety of security documents, and monitor the effectiveness of the overall security program.We expect you to have a passion for cybersecurity and attention to detail. You should have a desire to work with satellite data and products for the public and government. Besides, you should be able to perform well working in a team, along with system administrators, engineers and scientists.This position is located at a government facility in Suitland, MD. The position is eligible for a flexible work arrangement.ResponsibilitiesProvide overall cybersecurity program support to the Information System Security Officer (ISSO) and System Owner (SO)Provide security documentation support including documenting the implementation details of security controls in System Security PlansIdentify and recommend technical or policy changes to improve securityPlan, coordinate, and review technical artifacts to demonstrate the effectiveness of security controlsSupport security control assessments, penetration tests, and similar testing efforts by coordinating with stakeholders, communicating project plans, and providing guidance to technical and non-technical staffWrite and maintain core security documentation including System Security Plans and Contingency PlansPlan, manage, and oversee Plans of Actions and Milestone (POA&Ms)Coordinate security efforts and improvements with stakeholders including system administrators and operations teamsMonitor and report on vulnerability management program effectiveness including vulnerability scanning and patch managementCoordinate responses to data calls, audits, and other external requestsCoordinate security assessment efforts including Security Controls Assessments (SCAs), penetration testing, and risk assessmentsPlan, manage, and coordinate annual system assessment and authorization activities, to include continuous monitoringRequirements3+ years of cybersecurity experienceExperience with Federal government environments and concepts including NIST Risk Management Framework, NIST SP 800-53 security controls, and DISA Security Technical Implementation Guides (STIGs)Strong problem solving skills and ability to work under pressureStrong written and verbal communication skillsAbility to understand and explain complex security concepts and requirements to a variety of technical and non-technical personnelBS degree in Computer Science, Cybersecurity, or other related areaMust be a US Citizen and eligible to obtain a security clearanceDesired QualificationsExperience with government security assessment and management tools such as CSAMExperience with the NIST Risk Management FrameworkExperience with issue tracking and configuration management systems and processesIndustry certifications such as CISSP, GIAC certifications, Security+, and othersExperience with vulnerability management tools including Tenable NessusExperience with continuous monitoring and log management tools including ArcSight, BigFix, ePolicy Orchestrator, and similar toolsActive Secret security clearance