Description

You will manage security documentation and compliance activities to ensure system accreditation and risk mitigation.

This role is on-site.

Responsibilities

• Create and maintain System Security Plans (SSPs) for new and existing applications aligned with the Secure Application Development Life Cycle.
• Perform risk assessments, validate NIST control requirements, and recommend improvements to the security posture.
• Identify security testing and system scanning requirements, coordinating with technical leads and business areas.
• Monitor plans of action, milestones, and corrective action plans in collaboration with enterprise management.
• Assist with system data classifications and facilitate artifact collection for assessment requirements.

Required Skills

• 1+ years of experience in the IT industry applying information security principles.
• 1+ years of experience reviewing IT systems and applications.
• 1+ years of experience analyzing NIST Special Publications 800-37 Rev 1, 800-53 (Rev 3, 4, or 5), and 800-53A Rev 1.
• Foundational knowledge of networking components and various operating systems.
• Proficiency in developing System Security Plans (SSP).
• Ability to explain technical matters to non-technical audiences.
• Capability to manage multiple projects and shifting priorities simultaneously.

Preferred Skills

• CISSP, CISA, or PMP certifications.
• 2+ years of experience with security frameworks such as ISO, NIST, COBIT, or HIPAA/HITECH.
• Experience working with software vendors to implement security controls.

Key Skills

Education

Any Graduate