Cybersecurity Compliance Specialist

Jcssolutions; Bethesda (MD); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Short/long-term disability

401k with match

Professional development reimbursement

Job summary

JCS Solutions seeks a Cybersecurity Compliance Specialist to support NICHD in Bethesda, MD. You will manage FISMA security authorization, RMF processes, and ATO activities, developing thorough artifacts and conducting vulnerability management to maintain secure NICHD systems.

You will collaborate with ISSOs, system owners, and stakeholders, translating findings into risk-based actions while ensuring audit readiness and continuous monitoring.

Qualifications

• Direct experience supporting FISMA Security Authorization activities and RMF processes.
• Experience developing or maintaining federal cybersecurity authorization artifacts.
• Hands-on vulnerability management and incident response in a federal context.

Responsibilities

• Support FISMA Security Authorization, A&A, RMF, and ATO activities.
• Maintain authorization artifacts (SSPs, POA&M, SAPs, SARs).
• Lead vulnerability scanning, monitoring, and remediation tracking.
• Investigate incidents, document findings, and support containment and recovery.
• Coordinate evidence collection and reporting for audits and compliance reviews.

Skills

FISMA/A&A/RMF

NIST SP 800-53

Authorization artifacts

Vulnerability management

Incident response

Security documentation

Stakeholder communication

Tools

Tenable

Splunk

BigFix

Job description

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!

Job Summary

JCS Solutions is seeking a Cybersecurity Compliance Specialist to support the National Institute of Child Health and Human Development (NICHD) in Bethesda, Maryland. This role combines federal cybersecurity compliance, risk management, and hands-on cyber operations to support FISMA security authorization activities, continuous monitoring, vulnerability management, incident response, and audit readiness. The successful candidate will work closely with Information System Security Officers (ISSOs), system owners, technical teams, and stakeholders to maintain authorization packages, assess security controls, manage cybersecurity risks, and support the ongoing security posture of NICHD systems.

Location

Location: Bethesda, MD

Clearance: Ability to obtain or hold a Public Trust Tier II

Salary: $110,000.00 - $130,000.00

What’s in it for you

• Join a premier technology firm specializing in innovative solutions.
• Be part of a collaborative, inclusive, and innovative work culture.
• Enjoy tremendous growth potential in a high-performing team environment.
• A robust benefits package:
  • Health, dental, and vision insurance
  • Life insurance
  • Short-and-long term disability
  • Paid time off (PTO)
  • 401k retirement plan with employer match
  • Annual Professional Development Reimbursement Program
  • And more!

What you will do

• Support FISMA Security Authorization, Assessment & Authorization (A&A), Risk Management Framework (RMF), Authority to Operate (ATO), annual reviews, and NIST SP 800-53 Rev. 5 control assessment activities.
• Develop, update, and maintain authorization artifacts including:
  • System Security Plans (SSPs)
  • FIPS 199 Security Categorization documents
  • Privacy Impact Assessments (PIAs)
  • Risk Assessments
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Plans of Action & Milestones (POA&Ms)
  • Contingency Plans
  • Interconnection Security Agreements (ISAs)
• Maintain security documentation, control evidence, and CSAM records in support of system authorization efforts.
• Conduct or support vulnerability scanning, continuous monitoring, security reporting, patch validation, system hardening verification, and remediation tracking using Tenable and other approved tools.
• Analyze and track security findings to ensure timely remediation and risk reduction.
• Investigate and triage security alerts and incidents, document findings, support containment and recovery activities, and maintain operational evidence.
• Translate operational security findings into risk-management actions, compliance updates, and authorization package artifacts.
• Coordinate with ISSOs, system owners, infrastructure teams, program managers, and external stakeholders to collect evidence, resolve findings, and communicate cybersecurity risks and compliance status.
• Support audit readiness efforts and provide reporting for leadership and compliance reviews.

What you will bring

• Direct experience supporting FISMA Security Authorization activities, A&A/RMF processes, ATOs, NIST SP 800-53 control assessments, and authorization package development or maintenance.
• Experience developing, reviewing, or maintaining federal cybersecurity authorization documentation and artifacts.
• Hands-on experience with vulnerability management and/or security monitoring activities, including scan review, validation, prioritization, remediation coordination, and status reporting.
• Experience supporting incident response activities including alert triage, documentation, escalation, containment support, recovery coordination, and lessons learned.
• Experience documenting findings, risks, corrective actions, control evidence, and POA&Ms activities in an audit-ready environment.
• Ability to communicate cybersecurity and compliance requirements effectively to both technical and non-technical stakeholders.
• Ability to obtain or maintain an HHS Public Trust Tier II background investigation.

How you will wow us

• Experience with Tenable, Absolute, BigFix, Splunk, Tripwire, Microsoft Defender, Cylance, or comparable vulnerability management, endpoint security, EDR, SIEM, logging, or continuous monitoring platforms.
• Experience with CSAM and NIH cybersecurity processes, security documentation, and privacy resources.
• Experience supporting low-and moderate-impact federal information systems.
• Experience working with cloud and/or on-premises authorization packages.
• Familiarity with security baselines, vulnerability remediation programs, and federal compliance requirements.
• One or more cybersecurity certifications such as:
  • CISSP
  • CISA
  • CISM
  • SSCP
  • Security+
  • CySA+
• Equivalent industry-recognised cybersecurity certifications

About JCS Solutions

JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.

JCS is both a Great Place to Work and a Top Places to Work certified company.

Our employees embody our core values, and we are looking for others who do too!

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to ourcare.

At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $110,000.00 - $130,000.00

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.

NOTICE

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.