Cybersecurity Compliance Auditor/Security Control Assessor

Company: The Johns Hopkins University Applied Physics Labor
Location: Laurel
Posted on: January 24, 2025

Job Description:

Description

Do you like collaborating on a team with dynamic strengths to analyze complex systems which enable research across space exploration, cybersecurity, national defense, and groundbreaking technologies?If so, we are looking for someone like you to join our team at APL!We are ranked as one of Computerworld 's Top Places to Work in IT 6 years running, and we are seeking hardworking cybersecurity professionals as we expand our internal cybersecurity audit team. As an auditor you'll participate in and lead assessments of the effectiveness of cybersecurity controls and help provide effective governance of our classified information systems. Our IT compliance team is motivated by one common goal - securing our systems to enable national security missions.As a Cybersecurity Compliance Auditor...Your main responsibility will be to assess and evaluate the security posture of classified systems and implement the Risk Management Framework across multiple environments.Identify, communicate and deliver concise, coherent narratives on key controls and technical details of nuanced issues.Convey findings, recommendations and ideas on complex IT systems to functional leaders and executives.Apply a risk based control framework to identify cyber risk and determine compliance to government cybersecurity standards.
Qualifications

You meet our minimum qualifications for the job if you...

• Possess a B.S. degree in Information Systems (IS), Computer Science (CS), Business with IS/CS minor or related field or equivalent years of professional work experience.
• Have at least five (5) years of current working experience (related to certification and accreditation/assessment and authorization processes).
• Have recent experience in three (3) or more areas including network, end-point, and application security, identify and access management, vulnerability management, encryption, and incident response.
• Possess the Certified Information System Auditor (CISA) or GIAC System and Network Auditor (GSNA) certification, or other current DoD 8570 IAT Level III certification.
• Understand the following regulatory standards and guidance:
  • National Industrial Security Program Operation Manual (NISPOM);
  • DCSA Assessment and Authorization Process Manual (DAAPM), and/or;
  • DoD-Joint Special Access Program (SAP) Implementation Guide (JSIG)
  • Possess an understanding of system level software and operating systems, to include Windows, Linux, Unix, Virtualization software, as well as a working knowledge of computing hardware and desktop applications and computer networking (LAN/P2P/WAN), and cloud technologies.
  • Demonstrate inter-personal effectiveness and strong verbal and written communication skills
  • Hold a current Secret security clearance with the ability to acquire a Top Secret security clearance within six (6) months. If selected, you will be subject to a government security clearance background investigation and must meet the requirements for access to classified information. Eligibility requirements include U.S. Citizenship.You'll go above and beyond our minimum requirements if you...Have knowledge of JHU/APL practices and procedures and highly developed analytical and customer service skills working in a technical environment.Are familiar with the Risk Management Framework (RMF), including NIST SP800-37, NIST SP800-53, and CNSSI 1253.Currently have active TS/SCI, or TS/SCI+poly security clearance.Held cybersecurity positions in classified DoD and/or Intelligence Community (IC) environments for 10+ years.Have an understanding of the FAR, DFARS, CMMC or other industry-specific compliance frameworks.Why Work at APL?The Johns Hopkins University Applied Physics Laboratory (APL) brings world-class expertise to our nation's most critical defense, security, space and science challenges. While we are dedicated to solving complex challenges and pioneering new technologies, what makes us truly outstanding is our culture. We offer a vibrant, welcoming atmosphere where you can bring your authentic self to work, continue to grow, and build strong connections with inspiring teammates.At APL, we celebrate our differences and encourage creativity and bold, new ideas. Our employees enjoy generous benefits, including a robust education assistance program, unparalleled retirement contributions, and a healthy work/life balance. APL's campus is located in the Baltimore-Washington metro area. Learn more about our career opportunities at http://www.jhuapl.edu/careers.
    About Us
    
    APL is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, physical or mental disability, genetic information, veteran status, occupation, marital or familial status, political opinion, personal appearance, or any other characteristic protected by applicable law.APL is committed to promoting an innovative environment that embraces diversity, encourages creativity, and supports inclusion of new ideas. In doing so, we are committed to providing reasonable accommodation to individuals of all abilities, including those with disabilities. If you require a reasonable accommodation to participate in any part of the hiring process, please contact Accommodations@jhuapl.edu. Only by ensuring that everyone's voice is heard are we empowered to be bold, do great things, and make the world a better place.The referenced pay range is based on JHU APL's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level with consideration for internal parity. For salaried employees scheduled to work less than 40 hours per week, annual salary will be prorated based on the number of hours worked. APL may offer bonuses or other forms of compensation per internal policy and/or contractual designation. Additional compensation may be provided in the form of a sign-on bonus, relocation benefits, locality allowance or discretionary payments for exceptional performance. APL provides eligible staff with a comprehensive benefits package including retirement plans, paid time off, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, education assistance, and training and development. Applications are accepted on a rolling basis.
    Minimum Rate
    
    $90,000 Annually
    
    Maximum Rate
    
    $230,000 Annually

Keywords: The Johns Hopkins University Applied Physics Labor, Annandale , Cybersecurity Compliance Auditor/Security Control Assessor, Accounting, Auditing , Laurel, Virginia