Description

You will support agencies in developing and implementing their information security programs through direct tactical assistance and high-level assessments.

This role is remote.

Responsibilities

• Interview administrators, managers, and third parties to gather information for program artifacts and formal processes.
• Develop, track, and manage agency information security implementation plans and progress.
• Conduct high-level assessments of agency infosec work to ensure compliance with state standards and control requirements.
• Identify, map, and re-engineer business processes to align with security policies.
• Document findings from interviews and document reviews to assist in developing robust procedures.

Required Skills

• 10+ years of experience in Information Security and Compliance.
• Strong working knowledge of NIST 800-53.
• 2+ years of experience conducting security audits based on standard control sets or acting as an information system security officer.
• Experience with Prior Authorization of Action (POA&M) or Corrective Action Plans (CAP).
• 3+ years of experience using a GRC tool such as Archer or similar platforms.
• Ability to identify, map, and re-engineer business processes.
• Strong schedule management, resource planning, and communication skills.
• Bachelor’s Degree in a relevant field.

Preferred Skills

• Experience completing an information security plan or system security plan notebook.
• Knowledge of IRS 1075, HIPAA, CJIS, MARS-E, and/or PCI-DSS.
• Government sector experience.

Key Skills

Education

Bachelor's degree