Applied online, filled out an online questionnaire, spoke with a recruiter, and had a video meeting with the hiring manager. Process took a week and a half. Good turn around. Posted job description did not align with responsibilities. Company was looking for someone to assess potential vendors security posture, not actually perform a compliance risk and control assessment function. Description wanted framework experience not utilized based on responsibilities described during interview. More of a VMO position.
Hiring Manager was polite and attentive.
I was not overly impressed with the misalignment of what was requested to what the day to day responsibilities were.
No technical questions asked.
No questions asked regarding risk, control, governance, methodology, TOD, TOE, evidence, control testing.
Something I noticed when applying; company had POAMS on one job description and POAM's on another. Neither is correct, it is POA&M (per FedRAMP) . It might seem insignificant, yet they want you to have experience with something not even spelled correctly. If there is a lack of review at even the initial communication level, it made me wonder if that is a systemic issue.
Overall interest declined as interview continued.