FOCI Risk & Compliance Specialist

SOS International LLC; Washington (District of Columbia); On-site; USD 63,000 - 132,000; Full time

Job summary

SOSi in Washington, DC is seeking a Risk Mitigation Specialist to support a government customer. The role focuses on planning, implementing, and overseeing risk management for FOCI across business processes and systems.

Responsibilities include risk assessments, internal control testing under RMIC, corrective action tracking, data curation in IRM/SPM via ServiceNow, and coordinating governance reporting. A Top Secret/SCI clearance is required.

Qualifications

• Active TS/SCI clearance.
• Bachelor’s degree in Business, Finance, Accounting, Risk Management, Security Studies, or related field.
• Minimum of 5 years of risk management, internal controls, or related DoD/IC experience.
• Experience conducting risk assessments, internal control testing, and corrective action tracking.
• Familiarity with DoD RMIC policy/guidance (DoDI 5010.40, SoA process).
• Experience with FOCI-related programs or Industrial Security.
• Strong data analysis, reporting, and written communications.

Responsibilities

• Perform risk assessments on business processes and systems supporting FOCI management strategies.
• Conduct internal control testing and document results per RMIC policy and related DoD requirements.
• Develop and track corrective action plans through remediation to closure.
• Curate and maintain risk management data in Intel governance using RM/IRM and SPM tools.
• Coordinate risk and assurance reports including annual SoA and governance reporting.
• Monitor FOCI policy compliance and emplaced mitigation plans across programs.
• Oversee collection and validation of security data for legal entities.
• Identify emerging FOCI risks and recommend mitigations.
• Prepare written correspondence, briefings, and reports for senior leaders.

Job description

SOSi in Washington, DC is seeking a Risk Mitigation Specialist to support a government customer. The role focuses on planning, implementing, and overseeing risk management for FOCI across business processes and systems.

Responsibilities include risk assessments, internal control testing under RMIC, corrective action tracking, data curation in IRM/SPM via ServiceNow, and coordinating governance reporting. A Top Secret/SCI clearance is required.