New

Security Documentation, Audit, and Quality Analyst

United States·Washingtonmid

OtherQuality Analyst

1 views0 saves0 applied

Apply Now

Quick Summary

Requirements Summary

At least 5 years of cybersecurity compliance, RMF documentation, audit support, quality control,

Technical Tools

OtherQuality Analyst

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward-thinking candidates that have strong experience in operational support and can help take to the next level in a proactive stance.

Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.

We offer a Full Benefits package including:

Competitive Employee Health Insurance options including dental
100% company paid vision plan
401K plan with generous company match and no vesting period
100% company paid life insurance
100% company paid long and short-term disability insurance
Training allowance
PTO and more

Security Documentation, Audit, and Quality Analyst

Must be a United States citizen.
Must be eligible for a Tier 4 High-Risk Public Trust investigation.
Strong preference for a current or recently favorably adjudicated Tier 4 or Tier 5 investigation.

Role:
Control the quality, traceability, currency, and acceptance readiness of cybersecurity deliverables. Maintain the evidence repository and deliverable register; conduct independent reviews of SSPs, POA&Ms, assessment packages, dashboards, situation reports, RCAs, audit responses, and recurring program reports; identify inconsistent or unsupported statements; and track corrections through closure. The position will also support FISMA, IG, GAO, OMB, CISA, independent assessor, penetration-test, and FedRAMP-related evidence requests. DFC requires audit-ready SSPs, SARs, POA&M records, control evidence, assessment artifacts, and Splunk-derived logging records that can be produced without a special evidence-collection surge.

The position will also support FISMA, IG, GAO, OMB, CISA, independent assessor, penetration-test, and FedRAMP-related evidence requests. DFC requires audit-ready SSPs, SARs, POA&M records, control evidence, assessment artifacts, and Splunk-derived logging records that can be produced without a special evidence-collection surge.

Minimum Requirements:

At least 5 years of cybersecurity compliance, RMF documentation, audit support, quality control, or federal technical writing
At least 3 years supporting federal cybersecurity documentation
Demonstrated ability to independently review:
- SSPs
- SARs
- POA&Ms
- Control evidence
- Risk assessments
- Continuous-monitoring reports
- Audit responses
- Incident reports and RCAs
Experience maintaining version control, comment resolution, document traceability, and evidence indexes
Experience supporting at least one federal audit, FISMA review, IG review, independent assessment, or comparable inspection
Strong Microsoft Word, Excel, PowerPoint, and SharePoint skills
Familiarity with a GRC platform and ServiceNow
Security+ or CGRC preferred

Competitive Differentiators:

CSAM reporting or data-quality experience
Experience building deliverable acceptance registers or quality dashboards
FISMA, IG, GAO, OMB CyberStat, CISA data-call, or FedRAMP experience
Ability to review technical evidence from Splunk, Tenable, Qualys, Microsoft Defender, Azure, and identity platforms
Experience measuring first-time acceptance, defect rates, finding closure, and SLA/KPI performance
Federal cybersecurity technical-writing background
Current Tier 4 or Tier 5 suitability

The resume must clearly identify:

Types and volume of deliverables reviewed
Audits and assessments supported
Evidence repositories or document-control systems maintained
Quality-control responsibilities
Defects, rework, acceptance, timeliness, or audit-response metrics
GRC, SharePoint, ServiceNow, and reporting tools used
Examples of correcting inconsistent or unsupported cybersecurity documentation

“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status”

Texting Privacy Policy

Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
Message frequency will vary depending on the application process.Msg & data rates may apply.
OPT out at any time by texting "Stop".