Назад
Company hidden
3 дня назад

Assessment and Authorization Specialist III (Remote)

150 000 - 160 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Assessment and Authorization Specialist III (Cybersecurity): Leading security and privacy control assessments for DOE NIST and FISMA systems across cloud and on-premises environments with an accent on federal cybersecurity frameworks, assessment documentation, and remediation oversight. Focus on analyzing control weaknesses, preparing A&A packages and findings reports, validating corrective actions, and supporting continuous monitoring and audit data calls.

Location: Remote within the United States; role associated with Washington, DC

Salary: $150,000–$160,000 per year

Company

hirify.global Mission Optimization, an hirify.global company, delivers administrative support services and federal project solutions as part of an Alaska Native Corporation serving government customers and shareholder communities.

What you will do

  • Lead comprehensive assessments of security and privacy controls, including system-specific and inherited controls, to determine implementation and operating effectiveness.
  • Evaluate deficiencies, document severity, recommend corrective actions, and oversee remediation and reassessment activities.
  • Prepare and review assessment reports, findings packages, risk assessments, and Assessment & Authorization documentation.
  • Assess NIST and FISMA systems across SaaS, PaaS, IaaS, and on-premises environments.
  • Review vulnerability scans, test reports, POA&Ms, system documentation, change requests, data flows, and network diagrams.
  • Lead security-related data calls and support internal and external audits, including FISMA activities.

Requirements

  • Bachelor’s degree or four years of equivalent professional experience.
  • 5–7 years of relevant experience conducting security control assessments, cybersecurity evaluations, or similar technical security work.
  • Experience overseeing assessments and collaborating with Security Assessment Teams, Security Control Assessors, ISSOs, TPOCs, System Owners, and Assessment Coordinators.
  • Strong knowledge of NIST SP 800-53 security and privacy controls, the NIST Cybersecurity Framework, NIST RMF, and applicable information security and privacy laws and regulations.
  • Experience assessing security and privacy controls aligned with federal cybersecurity frameworks.
  • Ability to analyze technical documentation, identify security gaps, and communicate findings clearly in written reports.
  • Strong understanding of continuous monitoring processes and system inheritance concepts.
  • Ability to work independently and collaboratively on complex assignments requiring sound judgment and comprehensive technical knowledge.
  • Ability to complete a DOE background investigation and obtain federal government clearance, including DOE Q clearance, for access to federal systems.

Culture & Benefits

  • Remote work arrangement within the United States.
  • Regular full-time employment with medical, dental, vision, life insurance, and 401(k) benefits.
  • Paid time off and additional voluntary benefits.
  • Supportive, challenging environment focused on innovation and diversity.
  • Growth opportunities and retirement options.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →