Security Auditor, RMF & Risk Mgmt; Hybrid DC)

Description

This role is part of a proposal submission. All offers of employment are conditional and subject to the awarding of the contract. The company reserves the right to modify, delay, or cancel the recruitment process based on the outcome of the award.

Location: Hybrid – Washington, DC
Job Type: W-2
Shift: Monday–Friday; 40-hour work week during DFC core hours of 7:00 AM–6:00 PM ET; after-hours assignments possible

Worksite Address: DFC HQ 1100 New York Avenue NW Washington, DC
Pay Max: $132,500
Security Clearance: Tier 4 High Trust Background Investigation
Direct Reports: 0
Travel Requirements: None

Ryan Consulting Group, Inc. is seeking a Security Auditor to support the U.S. International Development Finance Corporation (DFC). The Security Auditor is responsible for assessing and auditing complex information systems, platforms, and operating procedures in accordance with established corporate standards for efficiency, accuracy, and security. This role evaluates IT infrastructure for organizational risk, establishes controls to mitigate loss, and recommends improvements to existing risk management controls and the implementation of system changes or upgrades.

Key responsibilities include:

· Monitor security tools including Splunk, Tenable, Qualys, and Service Now.

· Support assigned Risk Management Framework (RMF) activities.

· Analyze vulnerability scans and prepare assessments and recommendations for reducing risks and vulnerabilities.

· Identify issues to be addressed within the Risk Register, Plans of Action and Milestones (POA&Ms), and audit artifacts to enhance the security posture of DFC systems.

· Assess and audit complex information systems, platforms, and operating procedures for efficiency, accuracy, and security.

· Evaluate IT infrastructure for organizational risk.

· Establish and evaluate controls designed to mitigate organizational loss.

· Determine and recommend improvements to current risk management controls and the implementation of system changes or upgrades.

Requirements

· Bachelor’s degree in Information Technology, Information Systems, Computer Science, Information Assurance, or a related field.

· 4–7 years of experience performing IT system security documentation, preferably within the federal government.

· In-depth knowledge of NIST, OMB, other federal cybersecurity governance standards, and the Risk Management Framework (RMF).

· Strong written and verbal communication skills with demonstrated ability to document processes and procedures.

Certification Requirements

One of the following:

· Certified Information Security Manager (CISM)

· Certified Information Systems Auditor (CISA)

Benefits at RYAN

RYAN offers a comprehensive, competitive benefits package designed to support the well-being of our employees and their families. Some benefits may vary by contract.

· Paid Holidays (varies by contract)

· Paid Time Off (PTO)

· Bereavement, Military, and Parental Leave

· 401(k) or Roth Retirement Plan with Employer Matching

· Medical, Dental, and Vision Coverage

· Health Savings Account (with employer contribution)

· Group Term Life Insurance

· Pet Insurance

· Employee Discount Perks

· Voluntary Life Insurance

· Short- and Long-Term Disability

· Accident, Cancer, and Critical Illness Insurance

Equal Employment Opportunity (EEO) Statement:
Ryan Consulting Group, Inc. is an equal opportunity employer. We are dedicated to ensuring equal employment opportunities in all aspects of employment, including recruitment, hiring, promotion, training, compensation, benefits, and termination. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic…