Security Compliance Lead — A&A, Risk & Incident Mgmt

Medium; Maryland; Hybrid; USD 150,000 - 160,000; Full time

Job summary

TSTC is seeking a Security Compliance Lead to join our focused security program. The role requires extensive experience guiding a dispersed security team on government compliance, A&A lifecycle support, vulnerability handling, and incident response.

The candidate will translate complex requirements for senior leadership and drive SOP improvements while coordinating with on-site and remote stakeholders. The position is hybrid with on-site work in Maryland or Colorado and periodic travel.

Qualifications

• Bachelor’s Degree Required
• 15 years of related security compliance experience
• CISSP or CISM
• Hands-on experience leading a security compliance team
• A&A lifecycle support documentation, POA&M management, and monthly reports
• Vulnerability identification and risk analysis/tracking
• Incident management and security event monitoring
• Privileged account management and certificate management processes
• Lead and support SOP documentation and updates
• Support weekly security team staff meetings
• Review security deliverables for accuracy
• Proficient in MS Office
• Ability to work independently and take initiative
• Excellent verbal and written communication skills

Responsibilities

• Lead and manage government security compliance tasks for the program.
• Oversee A&A lifecycle tasks, documentation, and reporting.
• Coordinate vulnerability tracking and risk analysis activities.
• Manage incident response and security event monitoring.
• Administer privileged account management and certificate management processes.
• Develop and update standard operating procedures and related documentation.

Skills

Security governance

Leadership

Documentation

Communication

MS Office

Self-motivation

Education

Bachelor’s Degree

Tools

ISA documentation

POA&M management

Job description

TSTC is seeking a Security Compliance Lead to join our focused security program. The role requires extensive experience guiding a dispersed security team on government compliance, A&A lifecycle support, vulnerability handling, and incident response.

The candidate will translate complex requirements for senior leadership and drive SOP improvements while coordinating with on-site and remote stakeholders. The position is hybrid with on-site work in Maryland or Colorado and periodic travel.