Cyber Risk & Compliance Auditor — Hybrid/Remote

MIT Lincoln Laboratory; Lexington (MA); Hybrid; USD 115,000 - 152,000; Full time

Benefits offered by this job

Health benefits

Pension / 401K

Paid leave

Tuition reimbursement

Job summary

MIT Lincoln Laboratory’s Security Department identifies and counters risks to national security through independent cybersecurity assessments of classified systems. You will review SSPs, security plans, and STIGs, ensuring compliance with RMF, JSIG, ICD-503, and NIST guidance.

You will communicate findings to system stakeholders, coordinate with owners, and support planning and readiness activities for new systems and reauthorizations.

Qualifications

• Bachelor's degree preferred in CS/IT or related field.
• Candidate must meet DoD security clearance requirements and RMF familiarity.
• Experience with RMF, JSIG, ICD-503 and STIGs is highly desired.
• Experience in compliance auditing and vulnerability assessments is required.
• Excellent written and verbal communication skills are required.

Responsibilities

• Conduct independent cybersecurity compliance assessments of classified systems.
• Evaluate security controls via SSPs, docs, configurations, and interviews.
• Assess compliance with NIST SP 800-53, JSIG, ICD-503 and STIGs.
• Review system security documentation and continuous monitoring evidence.
• Identify gaps, risks, and provide actionable remediation findings.
• Communicate results to stakeholders through reports and briefings.
• Coordinate with system owners to validate evidence and findings.
• Support planning, scope development, and government inspection readiness.
• Monitor changes to security requirements to keep practices current.

Skills

RMF knowledge

NIST SP 800-53

JSIG

Security audits

Communication skills

Vulnerability assessment

Education

Bachelor's degree in CS/IT or related field

Top Secret clearance eligibility

DoD 8570 IAM baseline cert (e.g. Security+)

Tools

STIGs

System virtualization

Windows/Linux/UNIX

Job description

MIT Lincoln Laboratory’s Security Department identifies and counters risks to national security through independent cybersecurity assessments of classified systems. You will review SSPs, security plans, and STIGs, ensuring compliance with RMF, JSIG, ICD-503, and NIST guidance.

You will communicate findings to system stakeholders, coordinate with owners, and support planning and readiness activities for new systems and reauthorizations.