IT Compliance Manager (Mid)

ECS is seeking a TS-cleared IT Compliance Manager to support one of our mission critical programs for the Department of Justice in Washington, DC.

Please Note: This position is contingent upon contract award.

We offer the chance to support the world’s finest law enforcement organization and help the people that keep us safe. In this job you will support OCIO FISMA audit readiness and compliance reviews by identifying gaps, organizing evidence, and driving corrective-action closure.

We are seeking candidates committed to high quality to provide innovative solutions. As an IT Compliance Manager, you will conduct deep-dive compliance and audit-readiness reviews of system and enterprise artifacts. Evaluate documentation, control evidence, POA&Ms, vulnerability management, access controls, and required safeguards; identifies deficiencies; develops actionable remediation paths; and supports defensible audit response packages and corrective-action tracking.

Responsibilities:

• Act as primary point of contact for audits, facilitate written business responses to audit findings and develop action plans with key stakeholders.
• Provide consultative support to engineering teams and business partners to identify opportunities for control improvements with the objective of mitigating risk and improving operational performance.
• Participate in and lead teams in ad hoc assignments and investigations as needed.
• Maintain centralized document repository for testing plans and business requirements across the organization.
• Coordinate plans and reporting for front-line compliance testing leads.
• Verify that required compliance controls are baked into new products.
• Perform risk assessment analyses and valuations for the current business processes new processes and system implementations.

• US citizenship with active Top Secret clearance
• Education/Certification requirements:
  • Bachelor's degree in Computer Science, Computer Engineering, or related degree.  
  • OR one of the following certifications: Security X/CASP+, CGRC/CAP, CISSO, Cloud+, FITSP-A, GCSA, GSEC, PenTest+, Security+
• Minimum of five (5) years of relevant work experience
• Must meet applicable FBI TS/SCI, background, training, facility-access, and polygraph requirements
• Demonstrated knowledge of FISMA audit preparation
• Demonstrated experience with NIST SP 800-53/800-53A
• Familiarity with NIST control-impact analysis and governance-board coordination
• Demonstrated experience with DOJ/FBI compliance programs; audit evidence review; corrective-action management; and strong technical writing