ISSO Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• In the role of a Security Analyst on our team, you will leverage your expertise to collaborate with Veterans Affairs (VA) Information System Owners (ISO), Information System Security Officers (ISSO), site managers, and various system stakeholders to facilitate and drive the completion of Risk Management Framework (RMF) steps 0-6 ATO activities and requirements, identify and mitigate risks, elevate project risks to leadership, comprehend and apply VA authorization policies and procedures, and offer information system security expertise.

• You will ensure that the appropriate operational security posture is upheld for information systems throughout their lifecycle, from product acquisition and installation to decommissioning.

• Your responsibilities will include completing and maintaining comprehensive security documentation and coordinating ATO support tasks that detail security information related to system installations, various IT systems, networks, hardware, and software across both complex and simple installation environments.

• You will collaborate with your client to convert security concepts into actionable, implementable solution recommendations that empower the client to make informed security decisions regarding all aspects of IT deployments, ensuring full commissioning is achieved through deployment into production and subsequent decommissioning.

• This position provides an opportunity for you to serve as a subject matter expert in information security and RMF while enhancing your skills in cybersecurity.

⛳️ Requirements

• Demonstrated experience in supporting all RMF steps, security categorizations, creating and updating security artifacts and FISMA security documents, implementing controls, and developing Plans of Action and Milestones (POA&M).

• Proficiency with National Institute of Standards and Technology (NIST) SP 800-53 security controls, RMF, and compliance standards and processes related to system authorizations.

• Experience in devising plans and methodologies for securely executing product installations in accordance with agency authorization policy requirements for significant system changes and development lifecycles, while identifying potential risks and collaborating with system stakeholders to formulate mitigation strategies to minimize or eliminate risks.

• Capability to analyze authorization documents and relevant artifacts against authorization requirements to pinpoint gaps, establish a timeline to address outstanding authorization needs, and engage directly with system stakeholders to resolve identified gaps within specified deadlines.

• Competence in independently leading client-facing meetings and presenting complex ATO subjects to clients.

• Ability to organize, manage, and maintain large volumes of discrete data with varying expiration dates across multiple systems concurrently.

• Eligibility to obtain and maintain a Public Trust or Suitability/Fitness determination as per client requirements.

• A Bachelor’s degree in Computer Science or Electronics Engineering, along with 5+ years of experience in information technology, or 13+ years of information technology experience in lieu of a degree.

🏝️ Benefits

• Comprehensive benefits package.