Governance and Security Specialist

Job Title:

Governance and Security Specialist Job Category:
Information Technology Time Type:
Full time Minimum Clearance Required to Start:
None Employee Type:
Regular Percentage of

Travel Required:

None Type of Travel:
None*
*
* The Opportunity:

CACI is seeking an experienced Governance and Security Specialist to support the Department of Homeland Security (DHS) Office of the Inspector General (OIG).

This role offers a unique opportunity to establish the governance foundation and security authorization framework for an enterprise AI and data analytics platform that strengthens national security oversight operations.

As a Governance and Security Specialist, you will bridge data governance and cybersecurity by operationalizing data governance frameworks, supporting Authority to Operate (ATO) processes, and ensuring AI and data platforms meet federal security and privacy requirements. You will develop governance documentation including metadata standards, data stewardship workflows, and access control policies while simultaneously supporting security assessments, continuous monitoring, and compliance evidence preparation.

From documenting data lineage and quality issues to preparing system security plans and POA&Ms, you will ensure that innovative AI capabilities are deployed responsibly within secure, compliant, and well-governed environments. Working within Azure Government cloud environments, you will shape both the governance posture and authorization strategy for a transformational program of national importance. Join us to make a meaningful impact by ensuring mission-critical systems are secure, compliant, and governed.

Responsibilities:

Lead establishment and operationalization of the DHS OIG data governance framework, including governance policies, metadata standards, data catalog standards, data classification schemes, and data stewardship workflows aligned with federal and DHS requirements

Provide comprehensive technical and documentation support for obtaining and maintaining Authority to Operate (ATO), authority-to-proceed, limited/provisional ATOs, and continuous monitoring for AI platforms, OIG Chat, Azure Commercial/GCC services, enterprise data platform, and pilot applications

Develop and maintain security authorization documentation including system security plans (SSPs), architecture diagrams, data flow diagrams, system boundary descriptions, security control implementation evidence, POA&Ms, scan results, and remediation artifacts

Support data stewardship processes, role-based access control (RBAC) design, data lineage documentation, access request workflows, and sensitivity labeling to ensure appropriate access and protection of investigative, law enforcement, and sensitive datasets

Integrate governance and security activities with OIG data governance council processes, cybersecurity teams, privacy officers, and Dev Sec Ops  teams to ensure coordinated oversight and compliance

Ensure AI controls support model governance, auditing, responsible AI principles, and compliance with federal AI requirements, including monitoring for bias, explainability, and appropriate use Support continuous monitoring programs including security assessments, control testing, configuration management, logging and audit trail documentation, and compliance evidence collection aligned with NIST 800-53, FedRAMP, and DHS security requirements

Conduct data quality assessments, profiling, and analysis to identify, document, prioritize, and support remediation planning for data quality issues as datasets are onboarded to the enterprise platform

Provide privacy documentation technical inputs including Privacy Impact Assessments (PIAs), privacy controls, handling of Personally Identifiable Information (PII)/Sensitive PII (SPII), and Law Enforcement Sensitive (LES) data protection measures

Develop and maintain comprehensive governance and compliance documentation to support investigative, administrative, audit, and operational use, including governance framework guides, data quality reports, authorization packages, and stewardship procedures

Qualifications:

Required –Bachelor's degree + 15 years of experience in data governance, cybersecurity, information security, risk management, compliance, or related field; equivalencies considered (Master's + 12 years; 21 years with no degree; AA + 17 years)
Must be able to obtain a Active DHS/ EOD Clearance as required.

Demonstrated experience supporting Authority to Operate (ATO) processes including security…