Information Security Assessment Quality Control Analyst

Saliense • McLean, VA

8d

About The Position

The Information Security Assessment Quality Control Analyst supports a fast-paced, process-driven cybersecurity environment focused on producing high-quality work products through continuous security control assessment activities. The analyst performs quality control and quality assurance reviews of security assessment documentation to ensure accuracy, completeness, consistency, and compliance with organizational requirements, regulatory standards, and Risk Management Framework (RMF) guidance. The position supports assessment and authorization activities and continual process improvement, requiring strong analytical, communication, and project management skills.

Requirements

• Working knowledge of NIST RMF guidance, assessment and authorization processes, security control assessments, and associated documentation requirements.
• Experience performing quality assurance and quality control reviews of cybersecurity, compliance, or assessment documentation.
• Experience developing and maintaining project schedules, plans, and status reporting products.
• Experience working with Governance, Risk, and Compliance (GRC) tools such as JCAM.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written and verbal communication skills, including the ability to communicate findings and recommendations effectively to technical and non-technical audiences.

Responsibilities

• Conduct quality control and quality assurance reviews of information security assessment deliverables to ensure accuracy, completeness, consistency, and compliance with applicable requirements.
• Review security assessment documentation and artifacts associated with Assessment and Authorization (A&A) efforts and RMF processes.
• Analyze assessment outputs and recommend improvements to quality, consistency, and compliance posture.
• Develop, maintain, and track complex project schedules, milestones, and work plans for ongoing assessment activities.
• Generate status reports, metrics, dashboards, and other management reporting products.
• Analyze existing Federal Information Security policies, standards, and procedures, and assist in developing and maintaining technical security policies, processes, plans, and guidance documentation.
• Support continuous monitoring and assessment activities through documentation reviews and process evaluations.
• Coordinate with security assessors, cybersecurity personnel, and stakeholders to resolve documentation deficiencies and improve assessment outcomes.
• Use Governance, Risk, and Compliance (GRC) tools, including JCAM, to review assessment activities and associated artifacts.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed