The specialist will conduct independent reviews and assessments of software development processes, configuration integrity, and release readiness. They are responsible for developing technical documentation detailing findings and ensuring compliance with defined policies and procedures.
Develop and execute test plans to evaluate AI systems for compliance with the OWASP AI Testing Guide and other industry standards. Document defects with clear reproduction steps and report findings to senior management and stakeholders.
Develop and execute test plans to evaluate software compliance with ISO/IEC 25010:2023 quality characteristics. Document defects with clear reproduction steps and report findings to senior management and stakeholders.
Develop and maintain critical security documentation including SSPs, SARs, and POA&Ms to achieve Authority To Operate (ATO). Conduct security control assessments, vulnerability scans, and risk analyses to ensure compliance with federal frameworks.
Advise commercial clients on FedRAMP requirements and NIST standards to prepare them for 3PAO audits. This includes conducting gap assessments, developing security documentation, and providing technical guidance for cloud environments.
Conduct comprehensive penetration tests across hosted and cloud environments for commercial and federal clients. Manage the full consulting lifecycle, including requirements analysis, reporting, and providing security improvement recommendations.
Perform accessibility audits and validation testing on cell phones and hardware to ensure compliance with Section 508 and WCAG standards. Document findings, recommend remediation solutions, and deliver educational presentations and training on accessibility topics.
Remediate complex digital documents across various file types to ensure compliance with accessibility standards. Conduct quality assurance reviews and collaborate with team members to maintain efficient submission workflows.
Conduct independent security control compliance assessments using NIST guidelines and automate assessments via OSCAL. Develop critical security documentation including Security Assessment Plans, Reports, and Plans of Actions and Milestones.
Conduct independent HIPAA compliance assessments to evaluate how platforms collect and protect user data, specifically for minors. Identify ePHI, assess security measures, and document risk mitigation plans in formal reports.
Conduct independent privacy assessments of digital products to ensure compliance with children's data privacy regulations. Evaluate data collection, storage, and sharing practices while providing detailed audit reports and recommendations.
The specialist will perform independent IT assessments and reviews across PMO areas including configuration, integration, and testing. They are responsible for developing technical test documentation and ensuring adherence to program policies and procedures.
Lead end-to-end internal assessments based on PCI DSS requirements and manage team communications regarding deliverables. Partner with security officers and application owners to handle evidence preparation and review.
Provide expert guidance to clients to achieve and maintain CMMC 2.0 compliance across levels 1-3. Responsibilities include assessing organizational readiness, developing compliance roadmaps, and overseeing subcontractor security requirements.
The role involves testing and evaluating internal controls against AICPA Trust Services Criteria to produce detailed SOC 2 Type 2 reports. Responsibilities include conducting gap analyses, gathering audit evidence, and providing remediation guidance to improve security posture.
Perform hands-on remediation of public-facing web content to fix accessibility defects identified during audits. This includes updating HTML structure, managing CMS content, and ensuring compliance with WCAG, ADA, and Section 508 standards.
Lead the design, implementation, and maintenance of the Information Security Management System (ISMS) in compliance with ISO 27001 standards. Conduct risk assessments, internal audits, and deliver security training to ensure organizational compliance.
