Information Security Assessment Quality Control Analyst
- Remote
- Full Time
About the role
About Saliense
At Saliense, we are committed to fostering a culture of continuous learning and professional growth. Our employees are encouraged to take on challenging and meaningful work, with ample opportunities for career advancement. We offer competitive compensation and benefits, including:
- 20 Days PTO + 40 Hours of Paid Sick & Safe Time
- 11 Federal Holidays + 2 Corporate Holidays
- Health, Vision, Dental, and Life Insurance
- 401(k) with Tiered Match & 100% Vesting
- Parental Leave for Birthing and Non-Birthing Parents
- Professional Development Reimbursement Program
We believe in empowering our team members to achieve their professional goals while contributing to impactful projects that make a difference. Join us at Saliense and be part of a growing organization dedicated to innovation, collaboration, and excellence. Visit www.saliense.com to learn more.
There are many more - connect with us to get a preview of the full benefits package.
About the role
- The Information Security Assessment Quality Control Analyst supports a fast-paced, process-driven cybersecurity environment focused on delivering high-quality work products generated through continuous security control assessment activities. The analyst is responsible for performing quality control and quality assurance reviews of security assessment documentation, ensuring compliance with organizational requirements, regulatory standards, and Risk Management Framework (RMF) guidance. This role requires strong analytical, communication, and project management skills to support assessment and authorization activities and drive continual process improvement.
What you'll do
- Conduct quality control and quality assurance reviews of information security assessment deliverables, ensuring accuracy, completeness, consistency, and compliance with applicable requirements.
- Review security assessment documentation and artifacts associated with Assessment and Authorization (A&A) efforts and RMF processes.
- Analyze assessment outputs and provide recommendations to improve quality, consistency, and compliance posture.
- Develop, maintain, and track complex project schedules, milestones, and work plans supporting ongoing assessment activities.
- Generate status reports, metrics, dashboards, and other management reporting products.
- Analyze existing Federal Information Security policies, standards, and procedures and assist in the development and maintenance of technical security policies, processes, plans, and guidance documentation.
- Support continuous monitoring and assessment activities through documentation reviews and process evaluations.
- Coordinate with security assessors, cybersecurity personnel, and stakeholders to resolve documentation deficiencies and improve assessment outcomes.
- Utilize Governance, Risk, and Compliance (GRC) tools, including JCAM, to review, assessment activities and associated artifacts.
Qualifications
- Working knowledge of NIST RMF guidance, assessment and authorization processes, security control assessments, and associated documentation requirements.
- Experience performing quality assurance and quality control reviews of cybersecurity, compliance, or assessment documentation.
- Experience developing and maintaining project schedules, plans, and status reporting products.
- Experience working with Governance, Risk, and Compliance (GRC) tools such as JCAM.
- Strong analytical, organizational, and problem-solving skills.
- Excellent written and verbal communication skills with the ability to effectively communicate findings and recommendations to technical and non-technical audiences.