Information Security Assessment Quality Control Analyst

About the role

• The Information Security Assessment Quality Control Analyst supports a fast-paced, process-driven cybersecurity environment focused on delivering high-quality work products generated through continuous security control assessment activities. The analyst is responsible for performing quality control and quality assurance reviews of security assessment documentation, ensuring compliance with organizational requirements, regulatory standards, and Risk Management Framework (RMF) guidance. This role requires strong analytical, communication, and project management skills to support assessment and authorization activities and drive continual process improvement.

What you'll do

• Conduct quality control and quality assurance reviews of information security assessment deliverables, ensuring accuracy, completeness, consistency, and compliance with applicable requirements.
• Review security assessment documentation and artifacts associated with Assessment and Authorization (A&A) efforts and RMF processes.
• Analyze assessment outputs and provide recommendations to improve quality, consistency, and compliance posture.
• Develop, maintain, and track complex project schedules, milestones, and work plans supporting ongoing assessment activities.
• Generate status reports, metrics, dashboards, and other management reporting products.
• Analyze existing Federal Information Security policies, standards, and procedures and assist in the development and maintenance of technical security policies, processes, plans, and guidance documentation.
• Support continuous monitoring and assessment activities through documentation reviews and process evaluations.
• Coordinate with security assessors, cybersecurity personnel, and stakeholders to resolve documentation deficiencies and improve assessment outcomes.
• Utilize Governance, Risk, and Compliance (GRC) tools, including JCAM, to review, assessment activities and associated artifacts.

Qualifications

• Working knowledge of NIST RMF guidance, assessment and authorization processes, security control assessments, and associated documentation requirements.
• Experience performing quality assurance and quality control reviews of cybersecurity, compliance, or assessment documentation.
• Experience developing and maintaining project schedules, plans, and status reporting products.
• Experience working with Governance, Risk, and Compliance (GRC) tools such as JCAM.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written and verbal communication skills with the ability to effectively communicate findings and recommendations to technical and non-technical audiences.