IT Risk and Compliance Specialist

Job Summary

To support the DSS Security and Compliance team, the full-time IT Risk and Compliance Specialist will manage continuous monitoring of security controls, risks, vulnerabilities, and compliance activities, while also administering compliance processes in ServiceNow GRC/IRM and conducting audits, with a hybrid work schedule available.

Key responsibilities:

• Perform and support continuous monitoring activities to assess the effectiveness of security controls and compliance
• Track and report on corrective action plans, control deficiencies, and remediation activities to ensure compliance with government security frameworks
• Support internal and external IT compliance audits, including evidence collection and control validation for various regulatory frameworks

Required qualifications:

• Bachelor's Degree in Management Information Systems, Computer Science, Business Administration, or a related field, or equivalent experience
• Current certification in IT security, risk, or compliance, such as CISA, CISM, or CRISC
• Minimum of 6+ years of experience in IT security, continuous monitoring, risk assessment, or compliance
• Hands-on experience with ServiceNow GRC/IRM or comparable Governance, Risk, and Compliance platforms
• Strong working knowledge of security and compliance frameworks, including FedRAMP, CMMC, NIST, and ISO 27001