System Compliance Auditor (TS/SCI #26-125)

· Assess the effectiveness of security controls in accordance with RMF · Perform security reviews to identify gaps in system architecture and design · Conduct risk analysis and develop mitigation recommendations · Execute security authorization reviews and support ATO decisions · Validate security posture of systems, networks, and applications · Monitor and evaluate compliance across information systems · Develop Statements of Risk (SORs) and document security findings · Provide authorization recommendations to the Authorizing Official (AO)

• 7+ years’ experience supporting compliance activities to include RMF

• Previous experience in SCA, ISSM, ISSO, or ISSE roles
• Strong working knowledge of Secure Systems & Cloud/AI/ML Environments and NIST RMF frameworks in advanced R&D portfolios
• Experience with GRC/RMF tools such as XACTA, eMASS, or ServiceNow (SNOW)
• IAM Level III certification (CISM, CISSP, or GSLC)

• Required Certifications: IAM I (CAP, CND, Cloud+, Security+ CE)

• Ability to assess vulnerabilities, analyze risk, and document findings clearly

· Experience supporting DoD, IC, or SAP environments · Knowledge of FedRAMP and cloud security requirements · Familiarity with STIGs, SRGs, and continuous monitoring practices

Travel: Up to 50% travel required during the first year.

Clearance · Active TS/SCI w/ CI Poly or willingness to take and pass a CI Poly