Strategic IT Security & Compliance Auditor

sgsconsulting; Lexington (MA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Software Galaxy Systems, LLC (SGS) is seeking an IT Security Risk Auditor/Compliance Specialist for a 36-month engagement in Lexington, MA. The role requires on-site work initially with potential remote days after ramp-up, and a focus on regulatory compliance including FAR/DFARS and NIST standards.

Interims clearance suffices to start, and the candidate will support governance, policy, reporting, and incident response.

Qualifications

• Experience in risk assessments and compliance auditing.
• Knowledge of RMF, NIST SP 800-53, and STIGs.
• Ability to read and apply NISPOM, FAR/DFARS, and related regulations.

Responsibilities

• Develops and oversees compliance programs and governance policies.
• Conducts internal compliance reviews and documents findings.
• May participate in internal or external audits.
• Recommends policy changes to improve compliance.
• Generates reports and analyzes data on compliance topics.
• Engages with internal and external stakeholders as needed.
• Develops presentations for compliance topics.

Skills

Risk assessments

Compliance auditing

Security reviews

Vulnerability assessments

RMF knowledge

STIGs knowledge

Education

Bachelor’s degree in CS/IT

Job description

Software Galaxy Systems, LLC (SGS) is seeking an IT Security Risk Auditor/Compliance Specialist for a 36-month engagement in Lexington, MA. The role requires on-site work initially with potential remote days after ramp-up, and a focus on regulatory compliance including FAR/DFARS and NIST standards.

Interims clearance suffices to start, and the candidate will support governance, policy, reporting, and incident response.