Position Overview

QIP is seeking a highly skilled IT Security Compliance Specialist to join our team. The ideal candidate will be responsible for ensuring that our organization's IT systems and processes comply with government security regulations and standards. This involves working with various stakeholders to assist them with their compliance and documentation. This role will provide additional technical support to ensure the secure and efficient operation of the IT infrastructure.

This is a full-time remote position with occasional travel required. QIP is a virtual office community and work will be performed in the applicant’s home office. The starting salary range of this position is $100,000-$110,000, based on experience and certifications.

Location Requirements

Applicants must reside in the Washington, DC metropolitan area (Virginia, Maryland or Washington, DC). No relocation benefits offered.

Responsibilities

Develop, implement, and maintain IT security policies and procedures in compliance with government regulations.
Conduct regular audits and assessments to ensure adherence to security standards and identify areas for improvement.
Collaborate with internal teams to address security compliance and implement appropriate solutions.
Provide technical support for IT systems, including auditing security-related configuration and ensuring system integrity.
Stay up-to-date with the latest federal compliance requirements and directives.
Participate in the planning and execution of security training and awareness programs for staff members.
Track due dates for federal government security data calls and supply data call responses to the Information System Security Officer (ISSO).
Act as a resource for other groups within the organization to assist with the tracking and completion of all of the tasks above.
Maintain data center system information and Plan of Action and Milestones (POA&M) documents in the Department of Justice (DoJ) Cyber Security Assessment and Management (CSAM) tool.
Manage CSAM system implementation statements, obtain artifacts, and support the Authorization to Operate (ATO) process.
Evaluate and respond to CSAM audit findings.
Provide an annual review and updates of all Federal Information Security Management Act (FISMA) documentation (e.g. System Security Plan, Disaster Recovery Plan, Configuration Management Plan, Business Impact Analysis, Incident Response Plan, Contingency Plan, and standard operating procedures (SOPs)).
Create, track and annually update system memorandums of understanding (MOUs).
Provide software attestation/software bill of materials (SBOM) support and submit Enterprise Architecture Technology Insertion (EATI) requests for new software.

Qualifications

Bachelors' degree in Information Technology, Computer Science, or related field
At least 5+ years experience in government IT compliance, security management, and support
Strong knowledge of government security regulations (e.g., FedRAMP, FISMA), NIST 800-53 controls, and DoJ CSAM tools
Strong project management and task tracking skills
Ability to work collaboratively with multiple stakeholders
Excellent problem-solving skills and the ability to communicate complex technical concepts effectively

Preferred Skills

Relevant certifications such as CISSP, CISM, or CISA are highly desirable.
Experience with managing projects and creating workflows in Atlassian Jira and Confluence
Experience working directly with an ISSO

Position Contingencies

This position requires the employee to obtain a federal public trust security clearance as mandated by a federal client/contract. While QIP does not discriminate on the basis of citizenship status when federal security clearances are not needed, a federal client/contract that requires a public trust security clearance prevents QIP from hiring applicants who are not U.S. citizens.

Company Overview

Quality Information Partners, Inc. (QIP) is a woman-owned small business that delivers expertise to the education community and beyond in data management, communications, project management, data analysis, report writing, web management/analysis, and technology planning services to the education data community and other clients with a focus on data production, analysis, or management. Our employee-developed core values are rooted in committing to quality and integrity, nurturing relationships, promoting compassion and growth, balancing work with self-care, striving to respect what makes us each unique, and celebrating successes. QIP's office is virtual and offers a flexible physical work environment. Additionally, employees receive competitive benefits, including a generous healthcare package and paid holidays, vacation days, sick leave, and a retirement plan.

QIP is an Equal Employment Opportunity (EEO) employer and does not discriminate in any employer/employee/prospective employee relations based on race, sex, color, national origin, ancestry, age, creed, religion, marital status, citizenship status, disability (including veterans with disabilities and veterans of the Vietnam era), sexual orientation, gender identity, or HIV status. Our commitment is to provide equal opportunity based solely on qualifications and merit.

QIP is committed to the full inclusion of all qualified individuals. As part of this commitment, QIP will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact HR@qi-partners.com.

Learn more about Quality Information Partners by visiting www.qi-partners.com. For questions and applications please submit a cover letter and resume to jobs@qi-partners.com no later than Thursday, September 26, 2024.

Quality Information Partners, Inc. (QIP) jobs

IT Security Compliance Specialist