Information Security Assessment Quality Control Analyst
Saliense
- McLean, United States
- Mid Level
- Posted
Skills
Required
- quality control
- assessment and authorization processes
- security control assessments
- cybersecurity / compliance / assessment documentation
- status reporting
- GRC
- JCAM
Preferred
- security assessment documentation
- Risk Management Framework RMF
- information security assessment deliverables
- Assessment and Authorization A&A
- RMF processes
- process evaluations
Information Security Assessment Quality Control Analyst supports a fast-paced, process-driven cybersecurity environment focused on delivering high-quality work products generated through continuous security control assessment activities.
About Saliense
- Saliense At Saliense, we are committed to fostering a culture of continuous learning and professional growth.
- Join us at Saliense and be part of a growing organization dedicated to innovation, collaboration, and excellence.
- Visit www.saliense.com to learn more.
- There are many more - connect with us to get a preview of the full benefits package.
Responsibilities
- The analyst is responsible for performing quality control and quality assurance reviews of security assessment documentation, ensuring compliance with organizational requirements, regulatory standards, and Risk Management Framework (RMF) guidance.
- This role requires strong analytical, communication, and project management skills to support assessment and authorization activities and drive continual process improvement.
- What you'll do Conduct quality control and quality assurance reviews of information security assessment deliverables, ensuring accuracy, completeness, consistency, and compliance with applicable requirements.
- Review security assessment documentation and artifacts associated with Assessment and Authorization (A&A) efforts and RMF processes.
- Analyze assessment outputs and provide recommendations to improve quality, consistency, and compliance posture.
- Develop, maintain, and track complex project schedules, milestones, and work plans supporting ongoing assessment activities.
- Generate status reports, metrics, dashboards, and other management reporting products.
- Analyze existing Federal Information Security policies, standards, and procedures and assist in the development and maintenance of technical security policies, processes, plans, and guidance documentation.
- Support continuous monitoring and assessment activities through documentation reviews and process evaluations.
- Coordinate with security assessors, cybersecurity personnel, and stakeholders to resolve documentation deficiencies and improve assessment outcomes.
- Utilize Governance, Risk, and Compliance (GRC) tools, including JCAM, to review, assessment activities and associated artifacts.
Requirements
- Working knowledge of NIST RMF guidance, assessment and authorization processes, security control assessments, and associated documentation requirements.
- Experience performing quality assurance and quality control reviews of cybersecurity, compliance, or assessment documentation.
- Experience developing and maintaining project schedules, plans, and status reporting products.
- Experience working with Governance, Risk, and Compliance (GRC) tools such as JCAM.
- Strong analytical, organizational, and problem-solving skills.
- Excellent written and verbal communication skills with the ability to effectively communicate findings and recommendations to technical and non-technical audiences.
Benefits
- Our employees are encouraged to take on challenging and meaningful work, with ample opportunities for career advancement.
- We offer competitive compensation and benefits, including: 20 Days PTO + 40 Hours of Paid Sick & Safe Time 11 Federal Holidays + 2 Corporate Holidays Health, Vision, Dental, and Life Insurance 401(k) with Tiered Match & 100% Vesting Parental Leave for Birthing and Non-Birthing Parents Professional Development Reimbursement Program We believe in empowering our team members to achieve their professional goals while contributing to impactful projects that make a difference.
jobapplier