IT Risk and Compliance Specialist - Hybrid Washington DC Office or Remote

Employer Industry: Research Institution

• Salary up to $165,000
• Comprehensive benefits program including health, dental, and vision insurance
• Defined contribution retirement program with a voluntary 403(b) option
• Generous paid time off and benefits promoting work/life balance
• Opportunity for mentorship and strategic guidance within the IT department
• Hybrid work schedule with flexibility for remote applicants

• Lead internal and external IT compliance audits, ensuring alignment with security standards such as FedRAMP and ISO 27001
• Execute risk assessments and security impact analyses to identify vulnerabilities and propose mitigation strategies
• Develop and manage audit documentation, including corrective action and remediation plans
• Collaborate with Security Engineers to remediate compliance issues and ensure regulatory alignment
• Provide mentorship to IT teams, translating regulatory requirements into actionable steps

• Bachelor’s Degree in Management Information Systems, Computer Science, Business Administration, or a related field
• Current certifications in IT security compliance, such as CISA, CISM, or CRISC
• Minimum of 6+ years of experience in IT security auditing or compliance, focusing on government security frameworks
• Proven expertise in auditing IT systems for compliance with security frameworks
• Proficiency in Governance, Risk, and Compliance (GRC) or Information Risk Management (IRM) systems

• Experience managing compliance in hybrid and multi-tenant infrastructures
• Strong familiarity with privacy regulations such as GDPR and HIPAA Privacy Rule
• Hands‑on experience in advanced security assessment techniques

We prioritize candidate privacy and champion equal‑opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately. We are not the EOR (Employer of Record) for this position.

Our role in this specific opportunity is to connect outstanding candidates with a top‑tier employer.