Information Assurance (IA) / Security Compliance Specialist

Information Assurance (IA) / Security Compliance Specialist

About Blue Rose Consulting Group

Blue Rose Consulting Group, Inc. (Blue Rose) is a certified HUBZone and Service-Disabled Veteran-Owned Small Business supporting Federal customers with mission-focused technology, professional services, and operational support. We are building a team for the anticipated Department of State Global Mission Operations Support (GMOS) effort supporting the Bureau of Diplomatic Technology, Enterprise Applications Directorate, Office of Consular Systems and Technology.

About the Role

Support Federal cybersecurity compliance, assessment and authorization, control implementation, POA&M management, vulnerability remediation, security documentation, and ongoing authorization activities. This position supports the Department of State Consular Affairs global information technology environment, which includes domestic and overseas facilities, on-premises infrastructure, cloud platforms, applications, databases, and enterprise support services. This is a contingent position based on contract award and final customer requirements.

What You’ll Do

• Support assessment and authorization activities for enterprise systems, applications, infrastructure, and cloud services.

• Develop, review, and maintain security plans, control implementation statements, risk assessments, policies, procedures, and authorization artifacts.

• Manage Plans of Action and Milestones, track findings and vulnerabilities, coordinate remediation, and report status to stakeholders.

• Assess compliance with NIST SP 800-53, FISMA, Department security policies, security baselines, and applicable executive or Federal mandates.

• Support vulnerability scanning, configuration compliance, Group Policy Objects, network enclaving, hardening, and continuous monitoring.

• Coordinate with ISSOs, system owners, engineers, administrators, application teams, and Government security organizations.

• Analyze security impacts of changes, modernization, cloud migration, and new technologies and provide actionable recommendations.

Minimum Requirements

• 5+ years of Federal information assurance, cybersecurity compliance, or security assessment experience.

• In-depth knowledge of NIST SP 800-53, FISMA, risk management, security controls, and authorization processes.

• Experience supporting A&A, POA&M management, vulnerability remediation, and continuous monitoring.

• Experience developing and maintaining Federal security documentation and evidence.

• Strong analytical, technical writing, communication, and stakeholder-management skills.

• Active Secret clearance; Top Secret may be preferred or required for certain assignments.

Preferred Qualifications

• Experience with Department of State security policies, GPOs, network enclaving, or High Value Assets.

• CISSP, CAP/CGRC, CISM, Security+, or equivalent certification.

• Experience securing cloud, hybrid, or globally distributed enterprise environments.

Compensation & Benefits

Compensation will be commensurate with experience, qualifications, assigned work location, and final contract requirements. Blue Rose offers a competitive benefits package for eligible full-time employees. Specific compensation and benefit details will be provided during the recruiting process.

Application Process

Please submit a current resume that clearly demonstrates the required experience, technical qualifications, certifications, and active security clearance. Candidates selected for consideration may be asked to provide additional information to support contract staffing and clearance verification.

Blue Rose Consulting Group, Inc. is an Equal Opportunity Employer.

This position is in anticipation of contract award and is contingent upon successful contract award. Applicants will be contacted regarding employment opportunities upon award notification.