Description

You will analyze and manage security risk and process compliance for research systems.

Responsibilities

• Support cybersecurity risk identification, analysis, and mitigation for VA systems and research environments.
• Develop, review, and implement security policies applying NIST Special Publications (SP 800-37, 800-53) and RMF guidance.
• Conduct modified risk assessments, annual security reviews, and vulnerability assessments to support FISMA compliance.
• Review and respond to Requests for Information (RFIs) from research partners using VA Handbooks, Directives, and NIST guidance.
• Prepare documentation, reports, and presentations using advanced Microsoft Word and PowerPoint skills.

Required Skills

• 10+ years of related experience with a Bachelor’s degree in Business OR 18 years of relevant experience in lieu of degree.
• 5+ years of experience with NIST frameworks and policy development (RMF, NIST SP 800-37, 800-53).
• Experience performing risk analysis, vulnerability assessments, and annual security reviews under FISMA requirements.
• Strong understanding of information security and assurance principles.
• Experience applying security policy-driven approaches.
• Advanced proficiency with Microsoft Word and PowerPoint.
• Experience supporting cybersecurity in research environments.

Preferred Skills

• Familiarity with endpoint management tools such as SCCM and BigFix.
• Relevant certifications: CAP, CISSP, CISM, PMP, CCSK.

Key Skills

Education

Bachelor’s degree