Senior IS Security Officer & Cyber Audit Lead (Flexible)

Parsons; Baltimore (MD); On-site; USD 125,000 - 225,000; Full time

Benefits offered by this job

medical

dental

vision

paid time off

401(k)

life insurance

flexible work schedules

holidays to fit your busy lifestyle

Job summary

Parsons is seeking an Information Systems Security Officer/Cybersecurity Auditor to support USCYBERCOM and enterprise IT systems. You will audit security postures, lead RMF-based assessments, and advise system owners on meeting security responsibilities.

Strong DoD governance knowledge and active TS/SCI with Polygraph are required. The role emphasizes evaluating SSPs, maintaining compliance, and using tools like ServiceNow, eMASS, or Xacta 360 to map controls and track baselines.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, or related discipline.
• 10+ years of relevant cybersecurity compliance, auditing, or information assurance experience.
• Active DoD 8570 IAM Level II certification (CAP, CASP+ CE, CISM, CISSP/Associate, GSLC, or CCISO).
• Deep knowledge of RMF (Risk Management Framework).
• Active TS/SCI with Polygraph clearance.

Responsibilities

• Evaluate Security Posture: Audit and maintain the security posture for complex information systems.
• Manage Compliance: Lead assessments, authorization, and continuous monitoring lifecycle.
• Advise Stakeholders: Provide analysis to system owners to meet security responsibilities.
• Review System Plans: Evaluate SSPs and architectures to identify compliance gaps.
• Assess Risk Controls: Analyze effectiveness of security controls to protect the CIA triad.
• Analyze Governance: Review security implementations against DoD benchmarks.

Skills

RMF knowledge

DoD governance

Security tools

Technical literacy (AWS, ACAS, vCenter

Education

Bachelor’s degree in Cybersecurity, Computer Science, or related discipline

Tools

ServiceNow

eMASS

Xacta 360

AWS

ACAS

vCenter

WSUS

STIGs/IAVAs

Job description

Parsons is seeking an Information Systems Security Officer/Cybersecurity Auditor to support USCYBERCOM and enterprise IT systems. You will audit security postures, lead RMF-based assessments, and advise system owners on meeting security responsibilities.

Strong DoD governance knowledge and active TS/SCI with Polygraph are required. The role emphasizes evaluating SSPs, maintaining compliance, and using tools like ServiceNow, eMASS, or Xacta 360 to map controls and track baselines.