ICF is actively recruiting for an experienced Information Assurance Security Specialist to support a Cybersecurity Risk Management and Compliance program. Your work will contribute and support comprehensive assessments of implemented controls and control enhancements to determine control effectiveness (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security and privacy requirements for the system and the organization).
The Information Assurance Security Specialist role performs assessments as required by the organization's continuous monitoring strategy which identifies the minimum monitoring frequency for implemented controls across organization; defines the ongoing control assessment approach; and describes how ongoing assessments are to be conducted (e.g., addressing the use and management of automated tools, and instructions for ongoing assessment of controls for which monitoring cannot be automated). This position prepares security and privacy assessment reports containing the results and findings from assessments. Provides an assessment of the severity of the deficiencies discovered in the system, environment of operation, and common controls and recommends corrective actions to address identified vulnerabilities. The Information Assurance Security Specialist facilitates development of corrective action plans of actions and milestones (POA&M).
This role will be 100% remote and while building a great career path at ICF!
What you will be doing:
- Develops and implements information assurance/security standards and procedures.
- Coordinates, develops, and evaluates security programs for an organization.
- Recommends information assurance/security solutions to support customers' requirements.
- Identifies, reports, and resolves security violations.
- Applies know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures.
- Analyzes general information assurance-related technical problems and provides basic engineering and technical support in solving these problems.
- Ensures that all information systems are functional and secure.
Requirements:
- Bachelor's degree with a minimum of 5 years of experience OR Associates Degree with 6+ years, OR At least 7 years of experience.
- CISSP or equivalent professional certification related to the role/area.
- Experience conducting vulnerability scans and recognizing vulnerabilities in security systems
- Experience identifying and reviewing appropriate documentation to validate control design, implementation, and operation
- Experience planning and performing appropriate interviews to validate control design, implementation, and operation
- Experience interfacing with customers
- Experience performing impact/risk assessments.
- Ability to obtain and maintain a Public Trust clearance is required
Preferred Skills:
- Knowledge of federal and industry cyber regulatory compliance requirements
- Knowledge of risk management processes (e.g., methods for assessing and mitigating risk)
- Knowledge of cyber defense and vulnerability assessment tools and their capabilities
- Knowledge of Security Assessment and Authorization process
- Knowledge of Risk Management Framework (RMF) requirements
- Knowledge of system and application security threats and vulnerabilities
- Knowledge of systems diagnostic tools and fault identification techniques
#ICFNS Working at ICF ICF is a global advisory and technology services provider, but we're not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.
We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy.
We will consider for employment qualified applicants with arrest and conviction records.
Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
Read more about workplace discrimination rights or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act.
Candidate AI Usage Policy At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted. This policy is in place to maintain the integrity and authenticity of the interview process.
However, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.
Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.
The pay range for this position based on full-time employment is:
$98,614.00 - $167,644.00
Nationwide Remote Office (US99)
Never miss an opportunity! Create an alert based on the job you applied for.