Minimum 7 years in IT and security, with 3 years supporting a Federal Agency's InfoSec program.
Familiarity with FISMA, FedRAMP, FIPS, and NIST Special Publications.
Experience with Risk Management Framework and Cyber Security Framework, translating technical requirements into actionable security recommendations.
Strong relationship management skills with System Owners, ISSOs, and CISO.
Experience in managing IT Governance, Risk, and Compliance Programs with RSA Archer eGRC tool.
Responsibilities
Support the development and execution of the information security program for a Federal Agency.
Conduct security assessments, ensuring compliance with federal standards.
Translate technical security requirements into risk-based recommendations.
Manage relationships with key stakeholders in the security landscape.
Oversee the usage of RSA Archer eGRC for tracking governance and risk assessments.
Benefits
Public Trust clearance required, which provides a pathway for obtaining higher-level clearances in the future.
Full Job Description
Required Experience
Minimum 7 years of experience in IT and security, minimum of 3 years' experience supporting an Information Security program at a Federal Agency.
Experience with the Federal Information Security Modernization Act (FISMA), Federal Risk and Authorization Management Program (FedRAMP), FIPS, and National Institute of Standards and Technology (NIST) Special Publications.
Experience utilizing the Risk Management Framework, the Cyber Security Framework, executing Security Assessment and Authorization activities, and the ability to translate requirements from system engineers and developers into data-driven and risk-based recommendations.
Experience working with and managing relationships with System Owners, Information System Security Officers, Authorizing Officials, and Chief Information System Security Officers.
Experience managing IT Governance, Risk, and Compliance Programs and using RSA Archer eGRC tool.
Qualifications:
Education: Master of Science in Information Management Systems or related field.
