Compliance Specialist
Washington, AR - USA
Job Summary
Job Title: Compliance Specialist( 3 positions)
Washington DC(Hybrid)
Long Term
Job Summary
Compliance Specialists support the Lead Compliance Specialist in execution of the FISMA reporting cadence SA&A workflow continuous monitoring documentation security control assessment activities and POA&M lifecycle management. Each Compliance Specialist owns a portfolio of SAMHSA systems and is responsible for the day-to-day evidence collection control implementation documentation and assessment package development for that portfolio.
Mandatory Qualifications
- Undergraduate degree in computer science information security or related discipline
- Minimum five (5) years FISMA Security Test & Evaluation (ST&E) experience
- Demonstrated experience executing the NIST RMF process: categorize > select > implement > assess > authorize > monitor
- Experience with security control implementation assessment and documentation against NIST SP 800-53 Rev 5 baselines
- Experience with POA&M development milestone tracking and remediation coordination with system owners
- U.S. citizenship required
Preferred Qualifications
- Direct federal agency cybersecurity experience (HHS DoD civilian agency)
- Experience with GRC platforms (RSA Archer ServiceNow GRC Xacta) for compliance workflow operations
- Experience with FedRAMP-authorized cloud environment compliance
Required Certifications (mandatory unless noted)
- MANDATORY ONE OF: CISSP CISM OR CAP equivalent
- Active or recent Public Trust suitability
Recruiting Submission Checklist
- Resume in TGI federal proposal format (chronological work history certifications education security clearances federal experience flag)
- Signed Letter of Commitment (using template in Section 4 of this document)
- Verified copies of required certifications (e.g. CISSP CAP CISM)
- Public trust suitability status if currently held; HSPD-12 readiness statement if not
- Contact information for two professional references (federal supervisors preferred)
- Confirmation of availability within 30-day Transition-In window