Information Security Assessment Quality Control Analyst

Saliense; McLean (VA); On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

20 Days PTO + 40 Hours of Paid Sick &

Health, Vision, Dental, and Life Insur

401(k) with Tiered Match & 100% Vest

Parental Leave for Birthing and Non-Bi

Professional Development Reimbursement

Job summary

Saliense, McLean, VA, is seeking an Information Security Assessment Quality Control Analyst to support a fast-paced cybersecurity environment. You will perform quality control and QA reviews of security assessment documentation, ensuring compliance with RMF and organizational requirements.

Strong analytical and communication skills are essential. You will coordinate with security assessors and stakeholders, develop schedules, and generate dashboards and reports to drive continual process

Qualifications

• Knowledge of NIST RMF guidance and security control assessments.
• Experience performing QA/QC on cybersecurity, compliance, or assessment documentation.
• Ability to develop and maintain project schedules and status reports.
• Experience with GRC tools such as JCAM.
• Strong analytical, organizational, and problem-solving abilities.
• Excellent written and verbal communication to technical and non-technical audiences.

Responsibilities

• Conduct quality control and quality assurance reviews of information security assessment deliverables for accuracy, completeness, consistency, and compliance.
• Review assessment documentation and artifacts for A&A efforts and RMF processes.
• Analyze assessment outputs and provide recommendations to improve quality and compliance posture.
• Develop and maintain complex project schedules, milestones, and work plans for ongoing assessment activities.
• Generate status reports, metrics, dashboards, and other management reporting products.
• Analyze existing information security policies, standards, and procedures and help update policies and guidance.
• Support continuous monitoring and assessment activities through documentation reviews and process evaluations.
• Coordinate with security assessors and stakeholders to resolve documentation deficiencies and improve assessment outcomes.

Skills

NIST RMF knowledge

Quality assurance

Project scheduling

GRC tools (JCAM)

Analytical skills

Communication skills

Tools

JCAM

Job description

Information Security Assessment Quality Control Analyst

About Saliense

At Saliense, we are committed to fostering a culture of continuous learning and professional growth. Our employees are encouraged to take on challenging and meaningful work, with ample opportunities for career advancement. We offer competitive compensation and benefits, including:

• 20 Days PTO + 40 Hours of Paid Sick & Safe Time
• Health, Vision, Dental, and Life Insurance
• 401(k) with Tiered Match & 100% Vesting
• Parental Leave for Birthing and Non-Birthing Parents
• Professional Development Reimbursement Program

We believe in empowering our team members to achieve their professional goals while contributing to impactful projects that make a difference. Join us at Saliense and be part of a growing organization dedicated to innovation, collaboration, and excellence. Visit www.saliense.com to learn more.

There are many more - connect with us to get a preview of the full benefits package.

About the role

• The Information Security Assessment Quality Control Analyst supports a fast-paced, process-driven cybersecurity environment focused on delivering high-quality work products generated through continuous security control assessment activities. The analyst is responsible for performing quality control and quality assurance reviews of security assessment documentation, ensuring compliance with organizational requirements, regulatory standards, and Risk Management Framework (RMF) guidance. This role requires strong analytical, communication, and project management skills to support assessment and authorization activities and drive continual process improvement.

What you'll do

• Conduct quality control and quality assurance reviews of information security assessment deliverables, ensuring accuracy, completeness, consistency, and compliance with applicable requirements.
• Review security assessment documentation and artifacts associated with Assessment and Authorization (A&A) efforts and RMF processes.
• Analyze assessment outputs and provide recommendations to improve quality, consistency, and compliance posture.
• Develop, maintain, and track complex project schedules, milestones, and work plans supporting ongoing assessment activities.
• Generate status reports, metrics, dashboards, and other management reporting products.
• Analyze existing Federal Information Security policies, standards, and procedures and assist in the development and maintenance of technical security policies, processes, plans, and guidance documentation.
• Support continuous monitoring and assessment activities through documentation reviews and process evaluations.
• Coordinate with security assessors, cybersecurity personnel, and stakeholders to resolve documentation deficiencies and improve assessment outcomes.
• Utilize Governance, Risk, and Compliance (GRC) tools, including JCAM, to review, assessment activities and associated artifacts.

Qualifications

• Working knowledge of NIST RMF guidance, assessment and authorization processes, security control assessments, and associated documentation requirements.
• Experience performing quality assurance and quality control reviews of cybersecurity, compliance, or assessment documentation.
• Experience developing and maintaining project schedules, plans, and status reporting products.
• Experience working with Governance, Risk, and Compliance (GRC) tools such as JCAM.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written and verbal communication skills with the ability to effectively communicate findings and recommendations to technical and non-technical audiences.