Senior Security and Compliance Specialist

Ad Hoc is a technology company that empowers organizations to deliver scalable, impactful digital services. Using modern, agile methods, our team creates products that meet people’s needs and transform their experience of government.

Our collaborations have shaped some of the defining moments in public-sector service delivery. We’ve helped build products that connect Veterans to tailored services, help millions access affordable health care, and support important programs like Head Start. As we work with agencies to deliver critical services, we’re also changing how the government approaches technology.

Our culture, communications, and tools are built for remote work, enabling us to bring together top talent nationwide. At Ad Hoc, remote life empowers our teams to design work environments that fit their lives and that foster flexibility and collaboration to achieve positive outcomes for our customers.

Ad Hoc values acceptance, accountability, and humility. We aren’t heroes. We learn from our mistakes and improve the process for the next time. We build small, inclusive teams to collaborate closely with our partners to solve the right problems and deliver software that works.

The Veterans Affairs business unit helps transform the VA into a modern digital services organization where Veteran outcomes are at the center of every effort. We partner with the VA to design and deliver seamless user experiences for Veterans, their families and caregivers, and VA employees. By applying better practices in service design, product management, and technology, we enable the VA to increase the use, quality, and reliability of services and decrease the time Veterans spend waiting for outcomes.

As a Senior Security and Compliance Specialist, you will serve as an experienced individual contributor responsible for supporting security, risk management, and regulatory compliance across complex federal technology programs.

Working with minimal oversight, you will collaborate with technical teams, program leadership, and government stakeholders to ensure systems meet security and compliance requirements while supporting successful program delivery.

You will contribute to the development and implementation of security and compliance strategies, provide subject matter expertise, and help identify opportunities to strengthen security practices and processes. You may serve as a primary security and compliance point of contact for program stakeholders, providing technical guidance and supporting cross-functional teams.

• Serve as a subject matter expert on security and compliance requirements, providing guidance and recommendations to internal teams, external partners, and government stakeholders.
• Apply expertise in the NIST Risk Management Framework (RMF), Federal Information Security Modernization Act (FISMA), and NIST SP 800-53 security and privacy controls.
• Evaluate how system changes, technical decisions, and development activities may impact security, privacy, and regulatory compliance.
• Support the implementation and continuous improvement of security and compliance processes across the program.
• Execute security and compliance activities, prioritize tasks, identify and resolve blockers, and collaborate with development teams to support secure software delivery.
• Support Authorization to Operate (ATO) preparation, maintenance, and continuous monitoring activities while balancing security requirements with program delivery objectives.
• Maintain security and compliance documentation, Plans of Action and Milestones (POA&Ms), and system artifacts within the organization's Governance, Risk, and Compliance (GRC) tools.
• Interpret applicable cybersecurity laws, regulations, frameworks, and standards, translating requirements into actionable guidance for cross-functional teams.
• Develop and maintain formal security documentation, compliance reports, and supporting artifacts for internal reviews, external audits, and regulatory requirements.
• Collaborate with program leadership, technical teams, and external partners to identify security risks, recommend mitigation strategies, and improve compliance practices.
• Provide technical guidance and mentorship to colleagues, helping strengthen security and compliance knowledge across the team.
• Support recruiting activities, including reviewing technical assessments and participating in candidate interviews as needed.

• Bachelor's degree in Computer Science, Information Assurance, Cybersecurity, or a related field, with 7+ years of relevant professional experience. Additional relevant experience may be considered in lieu of a degree.
• At least 4 years of hands-on cybersecurity experience and at least 2 years of experience working with security and compliance frameworks.
• Strong knowledge of NIST RMF, FISMA, and NIST SP 800-53 security controls.
• CompTIA Security+ certification and either CISSP or CISM certification.

• Certificate of Competence in Zero Trust (CCZT).
• CompTIA SecurityX (formerly CASP+) certification.
• Experience with ServiceNow Continuous Authorization and Monitoring (SNOWCAM).
• Familiarity with Kubernetes and Amazon Web Services Elastic Kubernetes Service (AWS EKS).