Cybersecurity Compliance Specialist

JCS Solutions LLC•Bethesda, MD

2d•$110,000 - $130,000•Onsite

About The Position

JCS Solutions is seeking a Cybersecurity Compliance Specialist to support the National Institute of Child Health and Human Development (NICHD) in Bethesda, Maryland. This role combines federal cybersecurity compliance, risk management, and hands-on cyber operations to support FISMA security authorization activities, continuous monitoring, vulnerability management, incident response, and audit readiness. The successful candidate will work closely with Information System Security Officers (ISSOs), system owners, technical teams, and stakeholders to maintain authorization packages, assess security controls, manage cybersecurity risks, and support the ongoing security posture of NICHD systems.

Requirements

Direct experience supporting FISMA Security Authorization activities, A&A/RMF processes, ATOs, NIST SP 800-53 control assessments, and authorization package development or maintenance.
Experience developing, reviewing, or maintaining federal cybersecurity authorization documentation and artifacts.
Hands-on experience with vulnerability management and/or security monitoring activities, including scan review, validation, prioritization, remediation coordination, and status reporting.
Experience supporting incident response activities including alert triage, documentation, escalation, containment support, recovery coordination, and lessons learned.
Experience documenting findings, risks, corrective actions, control evidence, and POA&M activities in an audit-ready environment.
Ability to communicate cybersecurity and compliance requirements effectively to both technical and non-technical stakeholders.
Ability to obtain or maintain an HHS Public Trust Tier II background investigation.

Nice To Haves

Experience with Tenable, Absolute, BigFix, Splunk, Tripwire, Microsoft Defender, Cylance, or comparable vulnerability management, endpoint security, EDR, SIEM, logging, or continuous monitoring platforms.
Experience with CSAM and NIH cybersecurity processes, security documentation, and privacy resources.
Experience supporting low- and moderate-impact federal information systems.
Experience working with cloud and/or on-premises authorization packages.
Familiarity with security baselines, vulnerability remediation programs, and federal compliance requirements.
One or more cybersecurity certifications such as: CISSP, CISA, CISM, SSCP, Security+, CySA+, or equivalent industry-recognized cybersecurity certifications.

Responsibilities

Support FISMA Security Authorization, Assessment & Authorization (A&A), Risk Management Framework (RMF), Authority to Operate (ATO), annual reviews, and NIST SP 800-53 Rev. 5 control assessment activities.
Develop, update, and maintain authorization artifacts including: System Security Plans (SSPs), FIPS 199 Security Categorization documents, Privacy Impact Assessments (PIAs), Risk Assessments, Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), Contingency Plans, Interconnection Security Agreements (ISAs).
Maintain security documentation, control evidence, and CSAM records in support of system authorization efforts.
Conduct or support vulnerability scanning, continuous monitoring, security reporting, patch validation, system hardening verification, and remediation tracking using Tenable and other approved tools.
Analyze and track security findings to ensure timely remediation and risk reduction.
Investigate and triage security alerts and incidents, document findings, support containment and recovery activities, and maintain operational evidence.
Translate operational security findings into risk-management actions, compliance updates, and authorization package artifacts.
Coordinate with ISSOs, system owners, infrastructure teams, program managers, and external stakeholders to collect evidence, resolve findings, and communicate cybersecurity risks and compliance status.
Support audit readiness efforts and provide reporting for leadership and compliance reviews.