Working knowledge of NIST RMF guidance and assessment processes.
Experience in quality assurance and control for cybersecurity documentation.
Proficient in developing project schedules and status reports.
Familiarity with Governance, Risk, and Compliance (GRC) tools like JCAM.
Strong analytical and problem-solving abilities.
Excellent communication skills for diverse audiences.
Responsibilities
Conduct quality control and assurance reviews of security assessment deliverables.
Review documentation related to Assessment and Authorization (A&A) and RMF processes.
Analyze assessment outputs and recommend improvements for compliance.
Develop and maintain project schedules and work plans for assessments.
Generate management reports, metrics, and dashboards.
Assist in developing and maintaining technical security policies and procedures.
Support continuous monitoring through documentation reviews and evaluations.
Coordinate with assessors and stakeholders to enhance assessment outcomes.
Benefits
Opportunity to work in a fast-paced cybersecurity environment.
Engagement in continuous process improvement initiatives.
Collaboration with a diverse team of cybersecurity professionals.
Access to advanced Governance, Risk, and Compliance tools.
Professional development opportunities in information security.
Full Job Description
About the role
The Information Security Assessment Quality Control Analyst supports a fast-paced, process-driven cybersecurity environment focused on delivering high-quality work products generated through continuous security control assessment activities. The analyst is responsible for performing quality control and quality assurance reviews of security assessment documentation, ensuring compliance with organizational requirements, regulatory standards, and Risk Management Framework (RMF) guidance. This role requires strong analytical, communication, and project management skills to support assessment and authorization activities and drive continual process improvement.
What you'll do
Conduct quality control and quality assurance reviews of information security assessment deliverables, ensuring accuracy, completeness, consistency, and compliance with applicable requirements.
Review security assessment documentation and artifacts associated with Assessment and Authorization (A&A) efforts and RMF processes.
Analyze assessment outputs and provide recommendations to improve quality, consistency, and compliance posture.
Develop, maintain, and track complex project schedules, milestones, and work plans supporting ongoing assessment activities.
Generate status reports, metrics, dashboards, and other management reporting products.
Analyze existing Federal Information Security policies, standards, and procedures and assist in the development and maintenance of technical security policies, processes, plans, and guidance documentation.
Support continuous monitoring and assessment activities through documentation reviews and process evaluations.
Coordinate with security assessors, cybersecurity personnel, and stakeholders to resolve documentation deficiencies and improve assessment outcomes.
Utilize Governance, Risk, and Compliance (GRC) tools, including JCAM, to review, assessment activities and associated artifacts.
Qualifications
Working knowledge of NIST RMF guidance, assessment and authorization processes, security control assessments, and associated documentation requirements.
Experience performing quality assurance and quality control reviews of cybersecurity, compliance, or assessment documentation.
Experience developing and maintaining project schedules, plans, and status reporting products.
Experience working with Governance, Risk, and Compliance (GRC) tools such as JCAM.
Strong analytical, organizational, and problem-solving skills.
Excellent written and verbal communication skills with the ability to effectively communicate findings and recommendations to technical and non-technical audiences.
