· 8 years of progressive IT experience, with at least 5 years of hands-on experience in one or more of the following: information security platforms (e.g., ServiceNow GRC/IRM, RSA Archer, MetricStream, Galvanize/Diligent), IT service management platforms, or automated compliance monitoring tools.
· Demonstrated experience configuring information security, risk management, or continuous automated monitoring modules — including compliance workflows, control assessments, automated alerting, and reporting. (Candidates must be able to describe specific implementations, not just list platform familiarity.)
· Hands-on experience building compliance and performance dashboards using enterprise reporting tools — including KPIs, metrics, scorecards, and trend analysis for cybersecurity and risk management audiences.
· Experience developing data integrations between information security or IT operations platforms and enterprise BI tools (e.g., Power BI, Tableau, Qlik) using APIs, scheduled exports, database connections, or similar methods.
· Working knowledge of ATO lifecycle processes, Risk Management Framework (RMF), and cybersecurity compliance metrics — including control assessment status, POA&M tracking, and continuous monitoring reporting.
· Experience with CMDB or asset management systems, including asset discovery, configuration item lifecycle management, and asset-to-service relationship mapping.
· Minimum 1 year of experience supporting federal government IT programs — preferably VA, DoD, or civilian agency environments. (Candidates must understand federal governance structures, compliance requirements, and stakeholder engagement norms.)