Vulnerability Management and Compliance Specialist

Asclepius is seeking a highly skilled Vulnerability Management and Compliance Specialist to support the National Institutes of Health (NIH) CIT Hosting and Storage Services Program. This enhanced role expands beyond vulnerability operations to include governance, documentation quality, audit preparedness, and continuous compliance across hybrid hosting environments.

Role Overview:

In this role, you will lead enterprise-wide vulnerability identification, prioritization, documentation, and remediation coordination across thousands of assets spanning on-prem servers, cloud platforms, databases, and customer-owned systems. You will also serve as a compliance SME, ensuring adherence to federal standards, audit readiness, and structured documentation practices required for FedRAMP, HHS, NIH, and hosting security frameworks.

Key Responsibilities:

• Oversee end-to-end vulnerability scanning, scoring, validation, and documentation across Windows, Unix/Linux, Oracle, SQL Server, cloud, and on-prem workloads.
• Manage critical, high, medium, and low findings across HSS and customer-owned systems, ensuring traceable documentation and audit-ready evidence.
• Track and maintain structured vulnerability KPIs including patching progress, SLA adherence, critical exposure trends, and compliance deviations.
• Work directly with hosting and infrastructure teams to drive timely remediation, configuration hardening, baselines updates, and secure build adherence.
• Interface with NIH Institutes and Centers (ICs) to validate customer-owned vulnerabilities, ensure technical accuracy, and support remediation plans.
• Maintain full compliance alignment with FedRAMP, HHS, NIH policies through continuous documentation updates, configuration standards, and audit preparation.
• Manage HSS's Vulnerability Portal dashboards and ensure compliance-related metrics remain visible, current, and actionable for leadership.
• Prepare structured monthly vulnerability and compliance summaries, including remediation progress, public-facing exposure risks, system compliance levels, and audit posture readiness.
• Support SecOps, A&A/Audit teams, and configuration management groups by providing vulnerability evidence, documentation artifacts, and control validation data.
• Ensure secure baselines remain enforced through scheduled patching, continuous scanning, and validated configuration states across hybrid cloud and on-prem environments.
• Develop and maintain SOPs, process documentation, compliance matrices, audit artifacts, and standardized reporting templates.
• Serve as a compliance liaison, ensuring vulnerability operations align with governance requirements, internal policy, federal audit controls, and quality documentation standards.

Required Qualifications:

• BS/BA or equivalent experience.
• Experience in Assessment and Authorization (A&A).
• Extensive experience leading vulnerability scanning, reporting, and remediation efforts within enterprise or federal environments.
• Strong understanding of hybrid infrastructure (on-prem AWS/Azure) including compliance operations, configuration management, and secure baselines.
• Ability to interpret vulnerability dashboards, compliance scoring, and audit indicators to drive actionable remediation plans.
• Experience collaborating with Windows, Unix/Linux, database, storage, cloud, networking, and compliance teams.
• Knowledge of federal security frameworks including FedRAMP, HHS, NIST 800-53, and NIH-specific requirements.
• Eligibility to obtain and maintain a Public Trust clearance.

Preferred Qualifications:

• Prior experience supporting large-scale, multi-tenant hosting environments.
• Experience in Assessment and Authorization (A&A).
• Experience coordinating vulnerability and compliance remediation with diverse customer groups.
• Strong documentation skills including SOP creation, compliance control mapping, audit artifact development, and evidence tracking.
• Excellent communication skills for interacting with leadership, engineers, auditors, and stakeholders.

Pay: $95,106.45 - $114,536.80 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible schedule
• Flexible spending account
• Health insurance
• Health savings account
• Paid time off
• Retirement plan

Work Location: In person

Salary : $95,106 - $114,537