POA&M IV&V Analyst (Cybersecurity)

Location: McLean, VA

Company

hirify.global provides client services and delivers cybersecurity, compliance, and risk-management work for impactful organizational projects.

What you will do

• Conduct independent reviews of POA&Ms to verify accuracy, completeness, regulatory compliance, and remediation status.
• Validate security weaknesses identified through assessments, audits, vulnerability scans, penetration tests, and continuous monitoring.
• Evaluate corrective action plans, remediation milestones, supporting evidence, and residual risk before recommending closure, acceptance, mitigation, or escalation.
• Perform independent assessments and follow-up testing to confirm that security controls operate as intended and vulnerabilities are mitigated.
• Develop POA&M dashboards, metrics, status reports, trend analyses, and executive-level briefings.
• Collaborate with ISSOs, ISOs, security assessors, and technical teams to resolve overdue findings and provide remediation guidance.

Requirements

• 8+ years of experience in cybersecurity, information assurance, risk management, compliance, or security assessment.
• Experience with JCAM or similar governance, risk, and compliance tools.
• Experience validating POA&Ms in federal, state, or regulated environments.
• Experience supporting NIST RMF authorization activities.
• Experience analyzing vulnerability scan results from Tenable, Nessus, Invicti, Qualys, Google Wiz, Nucleus, or similar platforms.
• Strong understanding of NIST SP 800-53 security controls, NIST RMF, NIST SP 800-37, NIST SP 800-53A assessment procedures, FISMA requirements, and continuous monitoring processes.
• Ability to assess and validate remediation evidence.
• Strong technical writing and documentation skills.
• Excellent analytical, problem-solving, and communication abilities.

Culture & Benefits

• Culture focused on continuous learning, professional growth, collaboration, and excellence.
• 20 days of PTO, 40 hours of paid sick and safe time, 11 federal holidays, and 2 corporate holidays.
• Health, vision, dental, and life insurance.
• 401(k) with tiered matching and 100% vesting.
• Parental leave for birthing and non-birthing parents.
• Professional development reimbursement program.