Overview
Remote
$58 - $62
Contract - W2
Contract - 12 Month(s)
10% Travel
Skills
Auditing
CISA
CISM
CISSP
Cloud Computing
Collaboration
Communication
Cyber Security
FOCUS
Information Security
Information Technology
Management
NIST 800-53
Regulatory Compliance
Risk Management
SCA
SEC
Security Architecture
Security Controls
System Security
Systems Architecture
Writing
Job Details
Title: IT Security Engineer/Lead
Location: Richmond, VA
Work Type: 100% remote
Duration: Long-term Contract
bout the Role
We are seeking a highly experienced Security Architect IV to join our team on a contract basis. This role will focus on developing and documenting System Security Plans (SSPs) for suppliers and enterprise applications, ensuring compliance with COV SEC530 standards and the NIST 800-53 framework.
The ideal candidate will have a strong background in security architecture, control assessment, and compliance. This position involves working closely with business units, evaluating security control responses, and identifying areas for remediation.
Key Responsibilities
- Develop and maintain detailed System Security Plans (SSPs) for internal systems and third-party suppliers.
- Conduct structured interviews with stakeholders to gather system architecture, security, and operational information.
- Analyze responses to security control assessments and identify compliance gaps or weaknesses.
- Ensure alignment with COV SEC530 and NIST 800-53 requirements.
- Document system vulnerabilities, assess associated risks, and propose mitigation strategies.
- Provide security guidance and consultation to business units and application owners.
- Collaborate with cross-functional teams to ensure ongoing compliance and security posture improvement.
- Support internal and external audits related to system security and compliance efforts.
Qualifications
- 5+ years of experience in Information Security, with a focus on security architecture, assessments, or compliance.
- Demonstrated expertise in writing and reviewing System Security Plans.
- Deep understanding of NIST 800-53, COV SEC530, and related compliance frameworks.
- Prior experience as a Security Control Assessor (SCA) is highly desirable.
- Strong knowledge of risk management principles and security control implementation.
- Exceptional communication and interpersonal skills to facilitate collaboration across teams.
- Proven ability to manage multiple priorities in a dynamic environment.
- Bachelor s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
Preferred Qualifications
- Certifications such as CISSP, CAP, CISA, or CISM.
- Experience working in or with government agencies or highly regulated environments.
- Familiarity with enterprise applications, cloud environments, and third-party risk management.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.