Senior Security and Compliance Specialist
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security and Compliance Specialist securing Veterans Affairs technology programs. Applying NIST, FISMA, and compliance expertise to support federal digital services and ATO activities.
Responsibilities:
- Serve as a subject matter expert on security and compliance requirements
- Provide guidance and recommendations to internal teams, external partners, and government stakeholders
- Apply expertise in the NIST Risk Management Framework, FISMA, and NIST SP 800-53 security and privacy controls
- Evaluate how system changes, technical decisions, and development activities may impact security, privacy, and regulatory compliance
- Support implementation and continuous improvement of security and compliance processes
- Execute security and compliance activities, prioritize tasks, identify and resolve blockers, and collaborate with development teams on secure software delivery
- Support Authorization to Operate preparation, maintenance, and continuous monitoring
- Maintain security and compliance documentation, POA&Ms, and system artifacts in GRC tools
- Interpret cybersecurity laws, regulations, frameworks, and standards and translate requirements into actionable guidance
- Develop and maintain formal security documentation, compliance reports, and supporting artifacts
- Collaborate with program leadership, technical teams, and external partners to identify risks and recommend mitigation strategies
- Provide technical guidance and mentorship to colleagues
- Support recruiting activities, including reviewing technical assessments and participating in candidate interviews
Requirements:
- Bachelor's degree in Computer Science, Information Assurance, Cybersecurity, or a related field, with 7+ years of relevant professional experience
- Additional relevant experience may be considered in lieu of a degree
- At least 4 years of hands-on cybersecurity experience
- At least 2 years of experience working with security and compliance frameworks
- Strong knowledge of NIST RMF, FISMA, and NIST SP 800-53 security controls
- CompTIA Security+ certification
- CISSP or CISM certification
- Must be legally authorized to work in the United States
- Must successfully complete and maintain required federal Public Trust background investigations and suitability/fitness determinations within required customer onboarding timelines
- Previous favorable Public Trust determination or federal customer suitability approval preferred
- Certificate of Competence in Zero Trust (CCZT) preferred
- CompTIA SecurityX (formerly CASP+) certification preferred
- Experience with ServiceNow Continuous Authorization and Monitoring (SNOWCAM) preferred
- Familiarity with Kubernetes and Amazon Web Services Elastic Kubernetes Service (AWS EKS) preferred
Benefits:
- Company-subsidized health, dental, and vision insurance
- Flexible PTO
- 401K with employer match
- Paid parental leave after one year of service
- Employee Assistance Program
- Remote work culture and flexibility
Similar Jobs
Cybersecurity Intern – Application Security
Cybersecurity intern supporting application security projects at GuidePoint Security, a cybersecurity solutions provider. Building skills through technical development, security response, training, and expert mentorship.
Information Security Architect – AI
AI Security Architect designing secure frameworks for Cotiviti’s AI systems. Leading threat modeling, testing, compliance, and data protection across the AI lifecycle.
Senior Security Engineer
Senior Security Engineer securing ICT processes and assets at XTB, a global online financial trading company. Managing incidents, vulnerabilities, security tools, threat modeling, and cybersecurity training.
Senior Security Engineer – Red Team
Red-team security engineer conducting penetration tests and threat research for Insider One’s AI-powered marketing and customer engagement platform. Supporting secure development across agile teams.
Group IT Security Manager
Group IT Security Manager securing Bolton’s global FMCG technology infrastructure. Leading Zero Trust, SOC effectiveness, incident response and security architecture initiatives from Milan.
Enterprise AI Security Engineer
Enterprise AI Security Engineer building guardrails, detections, and telemetry for Lilly’s enterprise AI systems. Integrating AI security controls across cloud, identity, endpoint, and operations platforms.
Enterprise AI Security Advisor
Enterprise AI Security Advisor securing agents, models, and AI infrastructure for Lilly’s global pharmaceutical business. Setting enterprise controls, testing standards, and security strategy.
Senior Security Advisor – Lead Control Assessor
Senior Security Advisor leading NIST 800-53 cybersecurity control assessments for Soteria’s clients. Coordinating assessors, validating evidence, and presenting findings to executives and boards.
Senior Zscaler Security Engineer
Senior Zscaler Security Engineer operating and expanding Zscaler Zero Trust environments for federal agencies. Integrating security, identity, monitoring, and service-management platforms.
Senior Staff AI Security Lead
Senior Staff AI Security Lead building secure LLM infrastructure and driving AI adoption across IonQ’s quantum computing security organization. Delivering production AI systems, governance, and measurable analyst productivity gains.
Senior Product Security Engineer
Product Security Engineer securing Close’s AI-powered CRM across applications, APIs, cloud infrastructure, and integrations. Building vulnerability management, security automation, and incident-response capabilities.
Principal Linux Security Engineer
Principal Linux Security Engineer securing CIQ’s enterprise Linux distributions and infrastructure. Building compliance profiles, security tooling, errata, and CVE assessments for demanding workloads.
Information Security and Governance Analyst, Mid-Level
Analista de Governança e Segurança da Informação apoiando auditorias, riscos e controles na Monkey. Empresa de tecnologia financeira que simplifica transações entre grandes empresas e fornecedores.
Security Engineer IV
Security Engineer IV leading AI/LLM security, cloud controls, compliance, and incident investigations. Rackspace Technology operates enterprise AI infrastructure for regulated and mission-critical customers.
Regional Sales Director, Identity Security
Regional Sales Director leading Mid-Atlantic and TOLA sales teams for Cyera’s AI security platform. Driving territory growth, enterprise deals, coaching, and quota achievement.
Security Engineer
Security Engineer operating Firmable’s SOC 2 and ISO 27001 security controls. Managing AWS cloud security, vulnerabilities, access, monitoring, audits and incident response remotely.
AVP, Cyber Application Security Architect
Cyber application security architect securing SaaS, cloud infrastructure, and software development lifecycles. Driving secure-by-design reviews, DevSecOps, threat modeling, and AI/ML security guidance.
Senior Cybersecurity Disaster Recovery, Contingency Planning SME
Cybersecurity DRCP SME leading nationwide BIA, DRP, and contingency planning programs. Supporting government agencies in strengthening national security and improving public services.
Cloud Specialist – Security SSR
Cloud Security Specialist securing AWS infrastructure for major Latin American companies. Designing AWS governance, network protection, compliance, automation, and incident remediation.
Senior Cybersecurity Architect
Senior Cybersecurity Architect governing Zero Trust, AWS, DevSecOps, and AI security architecture. Reducing cyber risk across HomeServe’s home-services technology and integrations.