Quantum Research International - Huntsville, AL
posted 4 days ago
Full-time
Huntsville, AL
Computer and Electronic Product Manufacturing
About the position
The Cybersecurity Compliance Assessor at Quantum Research International will support the National Cyber Security Operations Center's Compliance Assessment Services Team by conducting cybersecurity assessments. The role involves reviewing policies and procedures to ensure compliance with standards and regulations, identifying deviations, and providing remediation recommendations to enhance the security posture of the organization.
Responsibilities
- Utilize automated and manual methods to perform comprehensive cybersecurity assessments against customer networks.
- Identify deviations from acceptable security standards, industry regulations, or local policy.
- Analyze data, perform policy reviews, and identify vulnerabilities as part of compliance assessments.
- Collaborate with various teams to make recommendations for improving security posture.
- Participate in internal research and development efforts to evaluate new tools and develop security solutions.
- Document findings clearly and concisely, identifying residual risks and mitigation strategies.
Requirements
- BA/BS degree in Computer Science, Management Information Systems, Information Assurance, or a STEM degree preferred.
- 5 years of related IT/Cyber Information Assurance, Computer Analyst, or Engineering experience; industry certifications may substitute for a degree.
- Experience conducting managerial, technical, and organizational compliance assessments and technical audits against Windows and Linux environments, cloud architecture, IoT devices, and networking devices.
- Familiarity with standards such as RMF, DFARS, CMMC, HIPAA, CJST, NIST 800-53, or NIST 800-171.
- Attention to detail and ability to analyze data in a collaborative environment.
- Proven ability to research, analyze, and make recommendations on complex problems.
- Effective communication skills for presenting findings to internal and customer personnel.
Nice-to-haves
- Desired certifications include Security +, CISSP, CISA, CAP, or CEH.
