IT Risk Assessment Auditor

7 days ago

Lexington, Kentucky, United States MIT Lincoln Laboratory Full time


The Security Services Department's overall mission is to identify and counter security threats to the MIT Lincoln Laboratory's mission of development of game-changing technology in support of National Security, including guarding against compromise by foreign intelligence agencies and insider threats.

To accomplish this mission, this department formulates and implements policies, plans, and actions designed to protect facilities against threats of vandalism, accidental destruction, and sabotage; and safeguards personnel, classified and unclassified information systems, personal identifiable information, property, and other assets from exploitation and recruitment by foreign intelligence agencies.


We foster a diverse and inclusive culture where security professionals from a wide range of backgrounds are empowered to solve complex security problems in close collaboration with Laboratory research teams and Government counterparts.

Our people are our most important resource, and we encourage a casual and flexible opportunity-filled working environment that is technology-focused.

Where mission needs can be met, the Security Services Department encourages flexible schedules and hybrid remote work arrangements

Who are we?


MIT Lincoln Laboratory is a Federally Funded Research and Development Center (FFRDC) whose mission is research in support of National Security.

Mission - The Security Services Department's (SSD) overall mission is to identify and counter security threats to the MIT Lincoln Laboratory's mission of development of game-changing technology in support of national security, including guarding against compromise by foreign intelligence agencies and insider threats * Culture – We foster an inclusive, opportunity-filled environment of empowered team members from diverse backgrounds

What will you do?


The IT Security Risk Auditor position performs audits of classified Information Systems (IS) to ensure that they are being maintained in a compliant manner and are following applicable laws and government regulations, such as National Industrial Security Program Operation Manual (NISPOM) guidelines regarding the protection of classified information systems, National Institute of Standards and Technology (NIST) standards and special publications, and Laboratory Information System Security Procedures.

The candidate must be knowledgeable in fundamental computer security principles and policies:

Security Technical Implementation Guides (STIGs), NIST 800-53/Risk Management Framework (RMF), Joint SAP Implementation Guide (JSIG), Intelligence Community Directive (ICD) 503, CNSSI 1253, and DOD Manual Volumes 1-4.


General:

The IT Security Risk Auditor is responsible for maintaining and auditing programs to validate compliance with various government regulations and Laboratory Information Security policies.

The position is responsible for conducting comprehensive assessments of the management, operation, monitoring and technical security controls employed within or inherited by Information Systems to determine the overall effectiveness of the controls (i.e.

the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome) with respect to meeting the security requirements of the Authorization to Operate (ATO) for the system and for the ability to conduct open source and internal research to identify current threat indicators, exploits, and vulnerabilities.


Materials Control & Accountability:
Will help maintain an audit program to validate compliance with various government regulations and Laboratory Information security policies * Personnel Security: Will assist and serve as a subject matter expert for all Laboratory inspection and compliance by following the DCSA and DoD system of record for clearance process and reporting * Security Education, Training and Awareness: Will assist and maintain any new/updated government security regulations and requirements as it relates to classified and unclassified information protection

How will you grow?


You will find significant opportunities to do meaningful work in an environment intentionally designed to be one where you will learn, thrive and belong.

* Leadership: Room to advance on your team or to lead cross-functional projects. * Growth Opportunities: Potential for lateral and vertical movement. * Education/Training: Management training, mentorship, in-house and external courses. * Exposure: Engagement with sponsors, stakeholders, Laboratory leadership and other Departments and Divisions. * Community: Participation is encouraged for Laboratory social events, Employee Resource Groups (ERGs), clubs and study groups, volunteering and community service projects

What you need:
For this position, you must meet these basic requirements.

* Bachelor's degree in Computer Science, Information Technology, Computer Information Systems, or related field is required with a minimum of seven (7) years' experience conducting risk assessments within Special Access and Sensitive Compartmented Information Programs.

* Information Assurance Certifications preferred (CISSP/CISA, Security+, GSEC, CRISC or equivalent).

* Advanced academic degrees and/or certifications in information Assurance, Information Security or IT certifications may be considered substitutes for DoD experience.

* Experience in compliance auditing, security reviews, or vulnerability assessments. * Technical experience and skills, course work completed toward a degree, and industry IT certifications (i.e. CISSP, CISA) may be considered substitutes for education and experience. * Candidate must possess an in-depth knowledge of information security principles and policies such as Risk Management Framework (RMF) as presented by the National Institute of Standards and Technology (NIST), Joint Special Access Program (SAP)

Implementation Guide (JSIG), Intelligence Community Directive 503 (ICD-503), and all applicable Security Technical Implementation Guides (STIGs). * DoD 85770 IAM Level I Baseline Certification required. * Working experience directly related to Assessment and Authorization using any of the following:
o NIST 800-53/Risk Management Framework (RMF) o Joint SAP Implementation Guide (JSIG) o Intelligence Community Directive (ICD) 503 o National Industrial Security Program Operating Manual (NISPOM) Chapter 8 * Must be able to obtain and maintain a Top-Secret level DoD security clearance

Regulatory compliance experience:

The ability to read, understand and apply government regulation, policies and procedure National Industrial Security Program Operating Manual (NISPOM), 32 CFR Part 117, computer security principles and policies, to include, Security Technical Implementation Guides (STIGs) and NIST / Risk Management Framework (RMF).


Ideally, you will have:
The Laboratory values experiences from diverse backgrounds and occupations. The most successful candidates will have the following skills and qualifications.

Valued competencies:
Interpersonal, organizational, written and verbal communication skills. * Computer skills: Familiarity with security management software, such as SIMS and government databases such as DISS (Defense Information Security System)

Knowledge of business software:
Excel, Word, PowerPoint, Office, etc. * Flexibility: Comfortable responding to off-hours emergencies and local/overnight travel as needed (infrequent, but a possibility)


At MIT Lincoln Laboratory, our exceptional career opportunities include many outstanding benefits to help you stay healthy, feel supported, and enjoy a fulfilling work-life balance.


Benefits offered to employees include:

  • Comprehensive health, dental, and vision plans
  • MIT-funded pension
  • Matching 401K
  • Paid leave (including vacation, sick, parental, military, etc.)
  • Tuition reimbursement and continuing education programs
  • Mentorship programs
  • A range of work-life balance options
  • ... and much more
Please visit our Benefits page for more information. As an employee of MIT, you can also take advantage of other voluntary benefits, discounts, and perks.

Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Secret-level DoD security clearance.

MIT Lincoln Laboratory is an Equal Employment Opportunity (EEO) employer.

All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability status, or genetic information; U.S.

citizenship is required.

Requisition ID:
[[id]] #CJ

  • Nurse Researcher Assessor/Auditor

    7 days ago

    Lexington, Kentucky, United States InsideHigherEd Full time

    Job Title:Nurse Researcher Assessor/AuditorRequisition Number:RE45384Department Name:40502:Institute for Biomedical InformaticsWork Location:Manchester, KYGrade Level:46Salary Range:$ /hourType of Position:StaffPosition Time Status :Full-TimeRequired Education:ADNClick here for more information about equivalencies::Required Related Experience:6 yrsRequired...

  • Financial Crimes Risk Specialist

    1 month ago

    Lexington, Kentucky, United States TD Bank Full time

    Work Location:Falmouth, MaineHours:40Pay Details:-TD is committed to providing fair and equitable compensation opportunities to all colleagues. The included salary range for this role takes into account multiple factors that are considered in making compensation decisions. The base pay actually offered may vary based upon candidate's skills and experience,...

  • SOC Analyst

    1 week ago

    Lexington, Kentucky, United States Fresenius Medical Care Holdings, Inc. Full time

    This is a remote position. Prefer candidates from the EST timezone. PURPOSE AND SCOPE: The Security Operations Center will assist in 24x7 Cyber Security Intrusion Monitoring and Event/Incident Response. Working with multiple IT Operations teams and members of the Information Security office, they will perform day-to-day security functions and investigations...

  • Internal Audit

    1 week ago

    Lexington, Kentucky, United States Vaco Full time

    Let Vaco serve as your advocate in presenting you to our top clients who are looking for investment banking professionals. Our clients have immediate opportunities for Financial Auditors; don't let your resume get lost in the shuffle - let us work for you At Vaco, we give you anadvantage over your competition Our recruiters have direct relationships with...

  • Nurse Practitioner

    1 week ago

    Lexington, Kentucky, United States National Recruiters Full time

    We are looking for nurse practitioners interested in a flexible side job. This per diem job allows you to customize your schedule and earn supplemental income while maintaining an autonomous relationship.We are currently hiring throughout Kentucky. Your "territory" would be your home county and the contiguous counties but always within 90 minutes of your...

  • Head Digital Ethics

    1 month ago

    Lexington, Kentucky, United States Takeda Full time

    By clicking the "Apply" button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda'sPrivacy Noticeand Terms of Use. I further attest that all information I submit in my employment application is true to the best of my knowledge.Job...

  • Head Digital Ethics

    3 weeks ago

    Lexington, Kentucky, United States Takeda Full time

    By clicking the "Apply" button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda'sPrivacy Noticeand Terms of Use. I further attest that all information I submit in my employment application is true to the best of my knowledge.Job...

  • Project Manager

    1 week ago

    Lexington, Kentucky, United States MIT Lincoln Laboratory Full time

    Position Summary We are seeking an experienced project manager with a strong engineering background to join our team. The Project Manager will manage technical projects developing innovative state-of-the-art hardware & software prototypes. Projects span all phases of the hardware & software lifecycles in support of rapid deployment to benefit the nation....

  • Director, Global Medical Safety

    4 weeks ago

    Lexington, Kentucky, United States Kiniksa Pharmaceutical Full time

    Reporting to the Group VP, Global Medical Affairs, this individual will be responsible for leading and working collaboratively to assess, track and document the ongoing benefit-risk profile of all marketed products and those in development. This includes contributing to the safety sections of numerous aggregate reports (eg, DSUR, PBRER, ASR), coordinating...

  • Director, Global Medical Safety

    3 weeks ago

    Lexington, Kentucky, United States Kiniksa Pharmaceutical Full time

    Reporting to the Group VP, Global Medical Affairs, this individual will be responsible for leading and working collaboratively to assess, track and document the ongoing benefit-risk profile of all marketed products and those in development. This includes contributing to the safety sections of numerous aggregate reports (eg, DSUR, PBRER, ASR), coordinating...

  • Acute Care Full-Time position in Lexington, North Carolina

    3 weeks ago

    Lexington, Kentucky, United States Optum Full time

    $40,000 Student Loan Repayment or $20,000 Sign-on Bonus for individuals who have not previously participated in this program.Flexible provider schedules available between 20-40 hours per weekOptum Home & Community Care, part of the UnitedHealth Group family of businesses, is creating something new in health care. We are uniting industry-leading solutions to...

  • Acute Care Full-Time position in Lexington, Kentucky

    3 weeks ago

    Lexington, Kentucky, United States Optum Full time

    $10K Sign On Bonus for Individuals who have not previously participated in the programOptum Home & Community Care, part of the UnitedHealth Group family of businesses, is creating something new in health care. We are uniting industry-leading solutions to build an integrated care model that holistically addresses an individual's physical, mental and social...

  • Acute Care Full-Time position in Lexington, North Carolina

    4 weeks ago

    Lexington, Kentucky, United States Optum Full time

    $40,000 Student Loan Repayment or $20,000 Sign-on Bonus for individuals who have not previously participated in this program.Flexible provider schedules available between 20-40 hours per weekOptum Home & Community Care, part of the UnitedHealth Group family of businesses, is creating something new in health care. We are uniting industry-leading solutions to...

  • Acute Care Full-Time position in Lexington, Kentucky

    1 month ago

    Lexington, Kentucky, United States Optum Full time

    $10K Sign On Bonus for Individuals who have not previously participated in the programOptum Home & Community Care, part of the UnitedHealth Group family of businesses, is creating something new in health care. We are uniting industry-leading solutions to build an integrated care model that holistically addresses an individual's physical, mental and social...

  • Crisis Line Counselor

    1 week ago

    Lexington, Kentucky, United States New Vista of the Bluegrass, Inc. Full time

    If you are mission-driven and want to help the lives of people in your community, we have a place for you on our Team The Crisis Line Counselor serves as the initial contact for the community and clients in the New Vista healthcare system. This position is responsible for screening incoming calls, chats, and texts for risk, notifying appropriate staff in...

  • Licensed Behavioral Health Professional

    7 days ago

    Lexington, Kentucky, United States Corizon Health, Inc. Full time

    Experience & Requirements* Master's degree in Social Work, Counseling Psychology or Other Related Mental Health discipline.* Unrestricted, current license in the state of practice - LCSW, LMFT, LPC, LMHC, or Psychologist. Must maintain all licensures, certifications, continuing educational requirements, etc.* Counseling experience in a correctional setting...

  • Clinical Therapist

    7 days ago

    Lexington, Kentucky, United States ABHS Full time

    Job Title: FT Clinical Therapist Base: Harmony Bay Wellness Direct Supervisor: Clinical Supervisor Job Purpose Summary: The FT Clinical Therapist provides clinical services to the clients of Harmony Bay Wellness. Interface with the Clinical Supervisor and other program staff in decision-making processes involving clients and relay all findings during...

  • Clinical Therapist

    7 days ago

    Lexington, Kentucky, United States ABHS Full time

    Job Title: FT Clinical Therapist Base: Harmony Bay Wellness Direct Supervisor: Clinical Supervisor Job Purpose Summary: The FT Clinical Therapist provides clinical services to the clients of Harmony Bay Wellness. Interface with the Clinical Supervisor and other program staff in decision-making processes involving clients and relay all findings during...

  • Associate Director

    7 days ago

    Lexington, Kentucky, United States Novo Nordisk Full time

    About the DepartmentThe team is comprised of collaborative, diverse and passionate people who have a true sense of pride in their work and are committed to helping others grow and develop their careers. You'll also have a platform to engage with key stakeholders on a global scale throughout the entire pipeline process. And while changing the future of...

  • Licensed Behavioral Health Professional

    7 days ago

    Lexington, Kentucky, United States Corizon Health Full time

    Experience & Requirements Master's degree in Social Work, Counseling Psychology or Other Related Mental Health discipline. Unrestricted, current license in the state of practice - LCSW, LMFT, LPC, LMHC, or Psychologist. Must maintain all licensures, certifications, continuing educational requirements, etc. Counseling experience in a correctional setting...