> Markdown version of [/jobs/ext/3737745-information-assurance-security-specialist](https://www.wearedevelopers.com/jobs/ext/3737745-information-assurance-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Assurance / Security Specialist - **Company:** Delviom LLC - **Location:** United States (Remote available) - **Contract:** Permanent contract - **Skills:** Xacta, Information Systems, Zero Trust Network Access, Software Vulnerability Management, Privacy Controls, SARS Software Products, Cloud Platform System, RSA Archer Platform, Servicenow - **Published:** October 14, 2026 - **Apply:** https://www.dice.com/job-detail/6dee96f4-a908-47d0-9939-9bfd874466df ## About the Role * Extensive experience supporting federal cybersecurity compliance, information assurance, Risk Management Framework (RMF), security governance, and information system authorization. * Strong knowledge of NIST SP 800-37, NIST SP 800-53 Rev. 5, FISMA, FedRAMP, NIST continuous monitoring guidance, and federal cybersecurity policies. * Experience developing and reviewing System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), and Plans of Action and Milestones (POA&Ms). * Expertise conducting security control assessments, identifying compliance gaps, evaluating control implementation evidence, and supporting Authorization to Operate (ATO) decisions. * Experience supporting Information System Continuous Monitoring (ISCM), Ongoing Security Authorization (OSA), annual assessments, and security control validation. * Strong knowledge of vulnerability management, security impact analysis, risk acceptance, audit findings, and corrective action tracking. * Familiarity with federal GRC platforms such as CSAM, ServiceNow GRC, Xacta, or equivalent security authorization and compliance systems. * Experience supporting security assessments for cloud environments, High Value Assets (HVAs), privacy controls, Zero Trust initiatives, and federal audit readiness.