Description

You will manage system security plans and ensure compliance with NIST control requirements across new and existing applications.

Responsibilities

• Create system security plans (SSP) for new applications following the Secure Application Development Life Cycle (SADLC).
• Maintain SSPs for existing applications requiring authority to operate (ATO) and those undergoing hardware or software enhancements.
• Monitor plans of action and milestones (POA&M) and corrective action plans (CAP) in collaboration with the Enterprise Information Management office.
• Validate SSPs to ensure all NIST control requirements are met.
• Author recommendations to improve security posture based on findings from SOM PSP and NIST controls.

Required Skills

• Minimum 1 year of experience analyzing and applying information security principles and practices.
• Minimum 1 year of experience reviewing IT systems and applications.
• Minimum 1 year of experience analyzing NIST Special Publications 800-37 Revision 1, 800-53 Revision 3, 4, or 5, and 800-53A Revision 1.
• Working knowledge of networking components and various operating systems.
• Experience with Networking, Security, and SSO.
• Bachelor's degree.

Preferred Skills

• 2 years of experience with security frameworks such as ISO, COBIT, or HIPAA/HITECH.
• CISSP, CISA, PMP, or Security+ certifications.
• Experience working with software vendors to implement security controls.

Key Skills

Education

Bachelor's degree