Description

You will own security planning, assessment, and risk management functions for systems.

Responsibilities

• Develop, update, and maintain System Security Plans (SSP) for applications and systems.
• Plan and conduct Security Assessments to validate security control implementation.
• Facilitate Risk Assessment workshops, identifying threats, vulnerabilities, and impact.
• Maintain security artifacts, risks, and remediation plans within RSA Archer GRC.
• Serve as the liaison between program areas, technical teams, and CISO Office leadership.

Required Skills

• 4+ years of experience in cybersecurity GRC, system security planning, or information assurance.
• Hands-on experience developing SSPs, conducting Security Assessments, and facilitating Risk Assessments.
• Knowledge of NIST SP 800-53 and NIST Risk Management Framework.
• Experience using GRC platforms, specifically RSA Archer.
• Experience working with Information Owners and Custodians.
• Strong technical writing and documentation skills.
• Ability to work independently on complex assignments.
• CompTIA Security+.

Preferred Skills

• Experience in state or federal government cybersecurity programs.
• Familiarity with DIR Security Control Standards.
• CRISC or CISA certification.

Key Skills

Education

Any Gradute