IT Security Documentation Consultant

About Beacon Systems Inc

Beacon Systems Inc delivers Program Management Science Engineering and Technology Solutions to Federal Commercial State and Local Agencies. We are a subsidiary of Radiant Digital Solutions. Our Technology support to many DoD Agencies NASA Voice of America FDA and State Agencies such as State of FL RI MS ND VA and WV extends our delivery of solutions worldwide.

Job Title: IT Security Documentation Consultant

Location: Onsite - Jackson MS
Duration: 3 Years

Job Description:

The contractor will provide audit and compliance support services to assist with preparing for responding to and tracking internal and external audits. The contractor will coordinate with agency personnel technical staff and documentation resources to ensure audit requirements are addressed accurately and timely. Primary responsibilities include:

• Assist with planning coordinating and supporting information technology audits. - Prepare and coordinate audit responses and evidence submissions.
• Assist with development and tracking of: Corrective Action Plans Plans of Action and Milestones Safeguard and Security Reports security assessment responses audit status reports.
• Track audit findings through remediation and closure.
• Coordinate with business units and technical staff to obtain supporting documentation.
• Identify documentation gaps and work with other staff to facilitate development or revision of policies standards procedures and other governance documentation. - Review submitted evidence for completeness consistency and compliance.
• Monitor remediation activities and provide status reporting to management
• Assist with implementation and documentation of corrective actions.
• Maintain audit documentation repositories.
• Support periodic compliance assessments and internal reviews.
• Assist with risk assessments and compliance reporting.

Required skills

Demonstrated knowledge with several of the following:

• Information security governance
• IT audit processes
• Risk management
• Control assessments
• NIST Cybersecurity Framework
• Nist SP 800-53
• IRS Publication 1075
• Corrective Action Plans (CAPs)
• Plans of Action and Milestones (POA&Ms)
• Audit evidence collection
• Compliance collection
• Compliance documentation
• Security control implementation.

Preferred skills

• Experience supporting IRS SSA or OSA audits and responses.
• CISA CGRC CISSP CRISC Security or equivelant certifications