IT Security Risk Auditor - Hybrid, TS Eligible

Connexion Systems & Engineering Inc.; Bedford (MA); On-site; USD 76,000 - 99,000; Full time

Job summary

Connexion Systems & Engineering Inc. is seeking an IT Security Risk Auditor for a 3-year contract in Bedford, MA. The role is hybrid, predominantly onsite at the start, with potential 2-3 days on site as the project progresses, and eligibility for Top Secret clearance.

The position conducts audits of classified and unclassified information systems to ensure compliance with NISPOM, RMF, NIST SP 800-171, STIGs and related regulations, supporting government security requirements and ATO processes.

Qualifications

• Bachelor’s degree in a related field is required.
• 7+ years of experience conducting risk assessments.
• Experience in compliance auditing, security reviews, or vulnerability assessments.
• Knowledge of RMF, NIST SP 800-171, STIGs, and NISPOM.
• Ability to read and apply government regulations such as NISPOM and FAR/DFARS.

Responsibilities

• Audit classified and unclassified information systems for compliance.
• Assess management, operation, monitoring and technical security controls.
• Identify vulnerabilities and recommend policy/procedure changes.
• Support audit/review activities and document findings.
• Conduct threat indicators research to identify current risks.

Skills

Risk assessments

Compliance auditing

Vulnerability assessments

Reading regulations

Education

Bachelor’s degree in Computer Science / IT / CIS or related field with 7+ years risk assessment experience

Tools

CISSP

CISA

NIST RMF

NIST SP 800-171

NISPOM

Job description

Connexion Systems & Engineering Inc. is seeking an IT Security Risk Auditor for a 3-year contract in Bedford, MA. The role is hybrid, predominantly onsite at the start, with potential 2-3 days on site as the project progresses, and eligibility for Top Secret clearance.

The position conducts audits of classified and unclassified information systems to ensure compliance with NISPOM, RMF, NIST SP 800-171, STIGs and related regulations, supporting government security requirements and ATO processes.