Examples of specialized experience would typically include, but are not limited to: Experience independently reviewing and analyzing cybersecurity risk management data from multiple sources to identify risks, conduct comprehensive assessments of IT system security controls in accordance with NIST SP 800-37, and perform activities to improve enterprise cybersecurity processes; supporting Risk Management Framework (RMF) functions, including Governance, Risk and Compliance (GRC) activities, and facilitating compliance with OIG FISMA and FISCAM audits; and in conducting security control assessments, developing security authorization packages, and monitoring ongoing compliance with federal cybersecurity requirements. If selected you will be required to report to one of the following locations: Albany, NY; Arlington, TX; Atlanta, GA; Austin, TX; Baltimore, MD; Bedford, MA; Boston, MA; Chicago, IL; Cleveland, OH; Dallas, TX; Denver, CO; Detroit, MI; Eatontown, NJ; Hines, IL; Houston, TX; Little Rock, AR; Long Beach, CA; Los Angeles, CA; Martinsburg, WV; Miami, FL; Minneapolis, MN; Nashville, TN; Oakland, CA; Orlando, FL; Philadelphia, PA; Phoenix, AZ; Pittsburgh, PA; Salt Lake City, UT; San Antonio, TX; San Francisco, CA; Seattle, WA; Shepherdstown, WV; St. Louis, MO; St. Petersburg, FL; Tampa, FL; Washington, DC.