Cyber Security Compliance Assessor

Job Title
CYBER SECURITY COMPLIANCE ASSESSOR
Education
Bachelor's Degree
Location
CYBER SECURITY OPS COMMAND - HUNTSVILLE, AL 35806 US
Huntsville, AL 35806 US (Primary)
Career Level
Experienced (Non-Manager)
Category
Information Technology/Cyber Security
Salary Grade
Job Type
Full-time
Job Description
Overview:
Quantum Research International, Inc. (Quantum) provides our national defense and federal civilian and industry customers with services and products in the following main areas: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air and Missile Defense, and Fires Support Systems; 5) Intelligence Programs Support; 6) Experimentation and Test; 7) Program Management; and (8) Audio/Visual Technology Applications. Quantum's Corporate Office is located in Huntsville, AL, but Quantum actively hires for positions nationwide and internationally. We pride ourselves on providing high quality support to the U.S. Government and our Nation's Warfighters. In addition to our corporate office, we have physical locations in Aberdeen, MD; Colorado Springs, CO; Crestview, FL, Orlando, FL; and Tupelo, MS
Mission:
Quantum is seeking Cybersecurity Compliance Assessor to provide support to the National Cyber Security Operations Center's (NCSOC) Compliance Assessment Services Team (CAST) in the execution of Cybersecurity related Assessments. In this role, you will review policies, procedures and the associated practices to determine compliance; and identify deviations from acceptable standards, regulations, and policy. For those areas not in compliance, you will provide the remediation recommendations to achieve compliance.
Responsibilities:

• Job duties include utilizing automated and manual methods to perform comprehensive CYBER SECURITY assessments against customer networks to identify deviations from acceptable security standards, industry regulations, or local policy.
• Ideal candidate must be able to work in a collaborative environment, have the expertise to analyze data, perform policy reviews, and identify vulnerabilities as part of the overall compliance assessments to determine the overall security posture of the organization.
• Upon completion of an assessment, the candidate will collaborate with various teams and make recommendations to assist the customer in protecting their systems, networks and data with an end goal of improving the overall security posture of the organization.
• Successful candidate may also be required to participate in internal research and development efforts aimed at evaluating new tools, analyzing exploits and countermeasures, and developing new security solutions and strategies.
• Perform other duties as assigned as they align with department ,customer contracts and company mission.

Requirements:

• BA/ BS degree Computer Science, Management Information Systems, Information Assurance or STEM degree is preferred. 5 years related IT/Cyber Information Assurance , Computer Analyst or Engineering experience and industry certifications may be substituted for a degree.
• Experience conducting managerial, technical and organizational compliance assessments, as well as technical audits against Windows and Linux environments, cloud architecture, IoT devices, general and networking devices/peripherals.
• Experience with standards to include, but not limited to a combination of the following; RMF, DFARS, CMMC, HIPPA, CJST, NIST 800-53 or NIST 800-171
• Attention to detail, ability to analyze data and work in a collaborative environment to make recommendations, document findings in a clear and concise manner, identify residual risk to assist the customer in protecting their systems, networks, and data. The ability to make recommendations to mitigate risk.
• Knowledge of Information Systems, the associated weaknesses, typical remediation techniques, and network security principles
• Proven ability to research, analyze and make recommendations on complex, multifaceted problems
• Ability to speak effectively before groups of internal and customer personnel
• Desired Certifications include Security +, CISSP, CISA, CAP, or CEH
• Ability to travel up to 20% of the time if when applicable
• Selected applicants will be subject to a government security clearance investigation and must meet eligibility requirements for access to classified information. Pre-Screening will be performed prior to employment.

Equal Opportunity Employer/Affirmative Action Employer M/F/D/V:
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity, or any other characteristic protected by law. *Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
# of Hires Needed
1