Description

*) Supporting agencies during their development of the information security program with direct tactical implementation assistance.
*) Developing and tracking agency information security implementation plans.
*) Interview administrators, managers, and third parties to aid in the development of program artifacts.
*) Ensuring high-level assessments of agencies’ infosec work to ensure progress is made.
*) Providing high-level analysis of processes and procedures works to ensure compliance with state standards.
 
Daily Duties / Responsibilities:
*) Interviewing business and technical owners to determine policies and procedures used for each agency process.
*) Developing and tracking infosec implementation plan progress.
*) Documenting information gathered during both interviews and document reviews to assist with developing formal processes and procedures.
*) Assessing agency documentation to ensure adequate approaches are used to comply with controls.
 
Additional Skills/Duties:
*) Ability to identify, map, and re-engineer business processes.
*) Strong schedule management and resource planning skills.
*) Ability to work at a high-volume and fast pace.
*) Strong collaborator and strong ability to meet deadlines
 
Required Skills (Rank In Order Of Importance):  
*) 10+ Years of Experience in Information Security and Compliance.
*) 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer
*) Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience)
*) Prior Experience POA&M or CAP.
*) Strong Communication Experience.
*) Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience)

Preferred Skills (Rank In Order Of Importance):
*) Have completed an information security plan or system security plan notebook.
*) Simultaneously, manage multiple infosec work efforts.
*) Knowledge of IRS 1075, HIPAA, CJIS, MARS-E, and/or PCI-DSS.
*) Government sector experience

Required Education:
*) Bachelor’s Degree

Preferred Certifications:
*) CISA, GSLC, or equivalent certification

Key Skills

Education

Bachelor's degree