Description

You will lead security, risk, and compliance activities to support cybersecurity efforts and regulatory requirements.

Responsibilities

• Direct the establishment and enhancement of information systems security and compliance based on FISMA, NIST, CMS MARS-E, and HIPAA standards.
• Perform architectural reviews and risk analysis regarding network design, data access models, firewall rule requests, and vulnerability management.
• Audit and assess internal agency systems as well as business partner and service provider security controls.
• Develop and maintain System Security Plans (SSPs), Privacy Impact Assessments (PIAs), Interconnection Security Agreements (ISAs), and Computer Matching Agreements (CMAs).
• Conduct security and compliance reviews of contracts, Business Associate Agreements, and data usage agreements.

Required Skills

• 10+ years of experience in information security or a related field.
• Expertise in FISMA, NIST, CMS MARS-E, and HIPAA compliance frameworks.
• Proven experience with Risk Management Framework (RMF) and Assessment and Authorization (A&A) tasks.
• Ability to document and report using eGRC solutions, RSA Archer, and System Center Service Manager.
• Strong technical understanding of Linux and Windows servers, network firewalls, and IPS.
• Experience with Identity and Access Management (IAM) and SIEM solutions.
• Professional certification from ISC(2), ISACA, or SANS GIAC.
• Master’s degree in a related field or equivalent professional experience.

Preferred Skills

• Experience with Cloud services and vendor management.
• Hands-on experience with IBM System 390/zSeries and Enterprise NoSQL databases.

Key Skills

Education

Master’s degree