IT FIPS Compliance Lead

Accenture Federal Services • Arlington, VA

2d

About The Position

The IT FIPS Compliance Lead is responsible for ensuring organizational security measures meet FIPS 140-2/140-3 requirements. The role requires expertise in application security, cryptography, and Transport Layer Security (TLS), and involves implementing and maintaining controls that protect sensitive data and support compliance. The lead stays current on security trends and technologies, applies risk management principles, and analyzes security requirements in a complex environment. The position works with application and infrastructure owners and other cross-functional stakeholders to address vulnerabilities and security concerns.

Requirements

• 3+ years of experience with FIPS-approved algorithms, including AES, SHA-3, and RSA, and cryptographic key management (advanced).
• 3+ years of experience with cryptographic module requirements, security levels, and validation processes (CMVP) (advanced).
• 2+ years of experience in stakeholder management (intermediate).
• Strong communication skills to work with cross-functional teams.
• Proven track record of implementing security controls in a complex environment.
• Understanding of risk management principles and ability to analyze and interpret security requirements.
• Detail-oriented and proactive, with the ability to work effectively under pressure.

Nice To Haves

• Experience with NIST 800-171 controls or NIST 800-53.
• CMMC assessment experience.
• Exposure to FIPS compliance tools and processes, including encryption algorithms, key management systems, and secure communication protocols.
• Experience conducting security assessments, developing security policies, and implementing security best practices.

Responsibilities

• Lead efforts to ensure FIPS compliance within the organization.
• Implement and maintain security measures to meet FIPS 140-2/140-3 standards.
• Conduct regular assessments of application security.
• Provide expertise in cryptography and TLS protocols.
• Collaborate with application and infrastructure owners and other cross-functional teams to address security concerns and vulnerabilities.
• Support protection of sensitive data and continuously improve the organization's security posture.

Benefits

• A collaborative and caring community.
• Opportunities to grow and learn through hands-on experience, certifications, and industry training.
• A wide variety of benefits; specific benefits are not listed in the posting.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed