Information Security Compliance Specialist

Arc Aspicio•Washington, DC

6d•$108,000 - $140,000•Hybrid

About The Position

The Information Security Compliance Specialist supports complex technology programs for Government clients by overseeing, managing, tracking, and reporting on program-level information security to protect systems, facilities, and infrastructure. The role involves working across portfolios of applications, facilities, and infrastructure and collaborating closely with Government leaders, facility managers, software development teams, and Government security offices. The position requires 6–8 years of relevant experience on complex, mission-critical programs. Arc Aspicio operates in a hybrid work environment, with work performed at client sites, the company’s DC office, and remotely. Employees must live in the Washington, DC metro area within commuting distance of client sites and the DC office. The role requires the ability to travel to different locations and eligibility to obtain a Top Secret clearance; candidates must be U.S. citizens without dual citizenship. Arc Aspicio is a consulting and solutions company whose employees collaborate with clients and partners to develop human-centered solutions. Its culture emphasizes teamwork, learning, knowledge-sharing, leadership, and strong client and colleague relationships. The projected salary range is $108,000–$140,000, with compensation determined by factors including skills, experience, education, training, certifications, and business needs. The company describes total rewards as including compensation, benefits, bonuses, professional development, and other career opportunities.

Requirements

6–8 years of relevant cybersecurity and facility security experience overseeing and interacting with a portfolio of security assets and systems at a Government-program level involving multiple systems and facilities.
Direct experience engaging senior clients and stakeholders and delivering client work products in a complex environment.
Ability to thrive in a dynamic, ambiguous, and complex work environment and manage multiple tasks and projects simultaneously.
Outstanding written and oral communication and collaboration skills, with strong leadership potential.
Ability to collaborate and work effectively both remotely and in person.
Technological proficiency, especially with Microsoft products and collaboration tools such as SharePoint.
Interest in joining a consulting firm, learning business concepts, collaborating, and becoming involved in company events, offerings, and special projects.
Ability to work in the Washington, DC metro area and travel to different locations.
U.S. citizenship without dual citizenship.
Currently holds or can obtain a Top Secret clearance.
Bachelor’s degree.
Critical skills include executive presence, entrepreneurial spirit, strong work ethic, collaborative mindset, excellent problem-solving skills, and interest in consulting.
Strongly desired: interest in working on assignments outside of one project.
Submit a brief, tailored cover letter describing what the candidate seeks in a company and why they are a good fit for a consulting firm in this role.

Nice To Haves

Certified Information Systems Security Professional (CISSP) certification.

Responsibilities

Design, develop, and implement program-level information security policies and procedures covering portfolios of applications, facilities, and infrastructure.
Interact directly with Program Leadership and Project Leads to conduct audits and manage security assets, documentation, processes, and procedures.
Develop assessment criteria to evaluate compliance with Government-wide information security policy directives.
Analyze and evaluate existing programs’ security posture and work with leads to implement changes and improvements.
Coordinate and conduct risk assessments to identify potential vulnerabilities in program systems and infrastructure.
Identify and contribute new processes, techniques, and procedures to upgrade and enhance cybersecurity protocols.
Provide technical advice and leadership on security aspects of network and systems design to promote appropriate security applications and policies.
Communicate security status, risks, actions, and initiatives to Government leadership.
Collaborate with clients to solve problems, deliver client service, and achieve mission results.
Use consulting, business analysis, and communication skills to identify problems, analyze challenges, and recommend solutions to the team and clients.
Assist the ISSO with responsibilities as required.