Description

You will act as a cybersecurity consultant to leadership, business units, and vendors to manage security risk and compliance.

Responsibilities

• Perform architectural reviews and risk analysis regarding network design, information flow, and system access models.
• Review firewall rule requests, baseline configuration deviations, and vulnerability management tasks.
• Audit and assess internal agency systems and business partner security controls.
• Develop and maintain System Security Plans (SSPs), Privacy Impact Assessments (PIAs), and Interconnection Security Agreements (ISAs).
• Serve as the primary point of contact for third-party audits and assessments.
• Review contracts, Business Associate Agreements, and Data Usage/Sharing Agreements for security compliance.

Required Skills

• 5+ years of IT experience auditing IBM System 390/zSeries, Windows, Linux, and relational/non-relational databases.
• Strong working knowledge of FISMA, NIST, CMS MARS-E, and HIPAA Security and Privacy.
• Direct experience working within a FISMA compliant program.
• Hands-on experience with eGRC systems.
• Required Information Security Certification from ISC(2), ISACA, or SANs GIAC.
• Experience with networking infrastructure, including firewalls, IPS, switching, and routing.
• Proficiency in documenting audit activities using Microsoft Office, RSA Archer, and System Center Service Manager.
• Experience in Health Information Technology.

Preferred Skills

• Experience with Cloud services and vendor management.
• Knowledge of IAM, SIEM, and NoSQL databases.

Key Skills

Education

Any Gradute