*** U.S. Citizenship Required ***

This is a Hybrid position with two days a week on-site.

Roles and Responsibilities: This position provides security analyst support to a federal government client, which includes but is not limited to:

Provides support to one or more assigned Information System Security Officers (ISSOs) for Authorization & Accreditation documentation, artifact collection, Plans of Action and Milestones (POAMs), and data calls.
Responsible for completing / providing oversight over IT security operational activities such as execution/ remediation of vulnerability scans, monthly account reconciliation and security incident response process monitoring.
Provide coordination and reporting of IT Security Operation, IT Risk Management, IT Audit, and Disaster Recovery functions.
Analyze management and technical controls to ensure that specific security and compliance requirements are met through the verification of documented processes, procedures, and standards to validate maintenance of secure configurations.
Map requirements and regulatory requirements across the information security framework to identify overlapping requirements and compliance efficiencies.
Track enterprise compliance across multiple security frameworks and maintain up-to-date records of requirements and corresponding mitigating controls.
Monitor third-party risk assessments and assist in performing internal risk assessments.
Collaborate on critical IT projects to ensure that security policy/risk issues are addressed throughout the project life cycle.
Monitor NFA's change management process to ensure compliance.
Develop key performance metrics to track and ensure compliance with established policies and standards.
Support development of security processes and procedures and support service-level agreements to ensure that security controls are managed and maintained.
Participate in the development of security and privacy awareness training in conjunction with other members of the Security Compliance group.
Advise on system improvements to increase security.
Ensure POA&Ms are accurately identified, documented and that the resolution timeline meets the System Owner’s expectations, and is entered into the Government tool in a timely manner.
Provide system interconnections support. (e.g., maintain and update all system Interconnection Security Agreements (ISAs).
Provide system security documentation support, such as Security Authorization Package Core Documents.
Provide security Assessment & Authorization (A&A) support.
Provide System and Information Integrity (SI) and Flaw Remediation support.
Support processes that enable achievement in compliance with Government security mandates and maintain an ATO for each system.
Comply with Quality Assurance process.
Provide system security documentation support.
Participate in the security authorization and assessment process for FISMA systems.
Provide Risk Assessment (RA) support.
Assist with Data calls.
Provide Contingency Planning (CP) support.
Continually helping develop and improve the security posture of the system.
Review Risk Management program issues and risks associated with assigned systems, propose remediation, and support efforts to remediate or mitigate those risks.
Perform in depth reviews of logs and other artifacts for each IT system.
System and Information Integrity (SI) and Flaw Remediation support.
Accurately document contingency activities and lessons learned.

Qualifications and Education: Successful candidates shall have the following:

Must be a U.S. Citizen.
Must be able to pass a background investigation to obtain a Public Trust security clearance or have one.
Bachelor’s degree or higher in Computer Science, Information Systems, Engineering, Information Technology, or other related discipline from an accredited college or university or equivalent work experience.

Preferred Skills:

3+ years supporting IT Security Compliance.
Excellent verbal and written communications skills.
Security+ or related certification preferred.
A passion for problem solving and data-driven decision making.
Knowledge of NIST guidelines pertaining to POAM, A&A, RA, and CP processes.
Ability to direct customer expectations and drive projects forward to completion.
Ability to multi-task and engage on multiple projects simultaneously.
Strong organizational abilities with attention to detail and ability to manage to deadlines.
Excellent communication and intrapersonal skills to help explain complex systems using simple terms.
Able to work in a team environment.
Identifying complex problems and reviewing related information to develop and evaluate options and implement solutions.
Critical Thinking - Use logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions, or approaches to problems.
Ability to work in a dynamic and challenging environment.

Think Tank Inc.

About Us

New Jobs

Security Compliance Analyst