IT Compliance Manager (Mid)

ecsfederal; Virginia (MN); On-site; USD 80,000 - 105,000; Full time

Job summary

ECS Federal is seeking a TS-cleared IT Compliance Manager to support a DOJ program in Washington, DC. This role focuses on FISMA audit readiness, control evidence, POA&Ms, and corrective-action tracking as part of OCIO FISMA processes.

The candidate will lead audit responses, collaborate with engineering and business partners to improve controls, and ensure compliance across system and enterprise artifacts. Requires active TS clearance and relevant certifications.

Qualifications

• FISMA audit readiness expertise with supporting documentation.
• Experience with NIST SP 800-53/800-53A and governance.
• DOJ/FBI compliance program experience and audit evidence review.

Responsibilities

• Act as primary point of contact for audits, facilitate written business responses to audit findings and develop action plans with key stakeholders.
• Provide consultative support to engineering teams and business partners to identify opportunities for control improvements and mitigate risk.
• Participate in and lead teams in ad hoc assignments and investigations as needed.
• Maintain centralized document repository for testing plans and business requirements across the organization.
• Coordinate plans and reporting for front-line compliance testing leads.
• Verify that required compliance controls are baked into new products.
• Perform risk assessment analyses and valuations for current business processes and new implementations.

Skills

FISMA audit readiness

NIST SP 800-53/800-53A

DOJ/FBI compliance programs

Technical writing

Risk assessment

Audit coordination

Stakeholder communication

Education

Bachelor's degree in Computer Science, Computer Engineering, or related degree

Certifications: Security X/CASP+, CGRC/CAP, CISSO, Cloud+, FITSP-A, GCSA, GSEC, PenTest+, Security+

Job description

ECS is seeking aTS-cleared IT Compliance Manager to support one of our mission critical programs for the Department of Justice inWashington, DC.

Please Note: This position is contingent upon contract award.

Salary Range: $80,000 - $105,000

We offer the chance to support the world’s finest law enforcement organization and help the people that keep us safe. In this job you will support OCIO FISMA audit readiness and compliance reviews by identifying gaps, organizing evidence, and driving corrective-action closure.

We are seeking candidates committed to high quality to provide innovative solutions. As an IT Compliance Manager, you will conduct deep-dive compliance and audit-readiness reviews of system and enterprise artifacts. Evaluate documentation, control evidence, POA&Ms, vulnerability management, access controls, and required safeguards; identifies deficiencies; develops actionable remediation paths; and supports defensible audit response packages and corrective-action tracking.

Responsibilities

• Act as primary point of contact for audits, facilitate written business responses to audit findings and develop action plans with key stakeholders.
• Provide consultative support to engineering teams and business partners to identify opportunities for control improvements with the objective of mitigating risk and improving operational performance.
• Participate in and lead teams in ad hoc assignments and investigations as needed.
• Maintain centralized document repository for testing plans and business requirements across the organization.
• Coordinate plans and reporting for front-line compliance testing leads.
• Verify that required compliance controls are baked into new products.
• Perform risk assessment analyses and valuations for the current business processes new processes and system implementations.

• US citizenship with active Top Secret clearance
• Education/Certification requirements:
  • Bachelor's degree in Computer Science, Computer Engineering, or related degree.
  • OR one of the following certifications: Security X/CASP+, CGRC/CAP, CISSO, Cloud+, FITSP-A, GCSA, GSEC, PenTest+, Security+
• Minimum of five (5) years of relevant work experience
• Must meet applicable FBI TS/SCI, background, training, facility-access, and polygraph requirements
• Demonstrated knowledge of FISMA audit preparation
• Demonstrated experience with NIST SP 800-53/800-53A
• Familiarity with NIST control-impact analysis and governance-board coordination
• Demonstrated experience with DOJ/FBI compliance programs; audit evidence review; corrective-action management; and strong technical writing