Description

You will own security planning, assessment, and risk management functions for systems.

Responsibilities

• Develop, update, and maintain System Security Plans (SSP) for applications and systems.
• Plan and conduct Security Assessments to validate security control implementation.
• Facilitate Risk Assessment workshops, identifying threats, vulnerabilities, and impact.
• Maintain security artifacts, risks, and remediation plans within RSA Archer GRC.

Required Skills

• 4+ years of experience in cybersecurity GRC, system security planning, or information assurance.
• Hands-on experience developing SSPs, conducting Security Assessments, and facilitating Risk Assessments.
• Knowledge of NIST SP 800-53 and NIST Risk Management Framework.
• Experience using GRC platforms, specifically RSA Archer.
• Experience working with Information Owners and Custodians.
• CompTIA Security+ certification.
• Strong technical writing and documentation skills.

Preferred Skills

• Experience in state or federal government cybersecurity programs.
• CRISC or CISA certification.

Key Skills

Education

Any Gradute