Job SummaryWe are currently seeking an
IT Security Analyst IV. This position is a full-time opportunity located remotely.
The IT Security Analyst IV serves as a cybersecurity subject matter expert for the Arctic Research Support and Logistics Services (ARSLS) program and Battelle Arctic Research Operations (ARO). Under minimal supervision, this role leads the implementation, assessment, documentation, and continual improvement of cybersecurity and compliance programs supporting federal information systems, cloud environments, research platforms, and remote Arctic operations.
The position provides advanced expertise in FISMA, NIST 800-53, Risk Management Framework (RMF), vulnerability management, cybersecurity governance, risk management, and security operations to ensure the confidentiality, integrity, and availability of mission-critical systems and data.
ResponsibilitiesAs an IT Security Analyst IV, the selected individual will serve as the lead cybersecurity authority for complex federal and Arctic research environments, driving compliance, risk management, and security operations across geographically distributed programs. Responsibilities may include:
- Lead the implementation, assessment, monitoring, and sustainment of cybersecurity controls to maintain compliance with FISMA, NIST 800-53, and federal Risk Management Framework (RMF) requirements
- Coordinate cybersecurity assessments, audits, and authorization activities with internal stakeholders, external assessors, federal agencies, and corporate cybersecurity teams
- Lead cybersecurity projects and initiatives, ensuring objectives are achieved within scope, schedule, and budget constraints
- Conduct security assessments, control reviews, vulnerability assessments, and risk analyses to evaluate the effectiveness of cybersecurity controls and identify areas for improvement
- Develop and maintain security documentation, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, procedures, standards, and compliance artifacts
- Lead continuous monitoring activities including vulnerability management, remediation tracking, configuration compliance validation, security metrics collection, and reporting
- Collaborate with infrastructure, cloud, networking, and application teams to design and implement secure solutions that meet business and federal compliance requirements
- Evaluate emerging technologies, cloud services, applications, and operational initiatives to identify cybersecurity risks and recommend appropriate mitigations
- Support incident response activities including security investigations, root cause analysis, corrective action planning, and implementation of security improvements
- Serve as a cybersecurity advisor to system owners, project teams, program leadership, and stakeholders regarding cybersecurity strategy, risk management, compliance requirements, and security best practices
- Provide mentorship, guidance, and technical leadership to junior cybersecurity and IT staff
- Support cybersecurity activities across geographically dispersed facilities, remote field sites, cloud platforms, and Arctic communications infrastructure
Key Qualifications- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field, and eight (8) years of relevant experience; or an equivalent combination of education and experience
- Demonstrated experience supporting federal cybersecurity compliance programs, including implementation and assessment of NIST 800-53 security controls
- Experience with FISMA compliance, Risk Management Framework (RMF), continuous monitoring, vulnerability management, and security assessments
- Experience developing and maintaining cybersecurity documentation, policies, procedures, risk assessments, and compliance artifacts
- Strong understanding of cybersecurity principles, identity and access management, cloud security, infrastructure security, and enterprise security architecture
- Experience leading cybersecurity projects and coordinating activities across technical and non-technical teams
- Ability to communicate cybersecurity risks and recommendations effectively to technical staff, management, and external stakeholders
- Prior experience in information security, cybersecurity operations, governance, risk management, or compliance functions
- Must be a U.S. citizen
Preferred Qualifications- Certified Information Systems Security Professional (CISSP)
- Additional cybersecurity certifications such as CISM, CRISC, CGRC (formerly CAP), Security+, GIAC, or equivalent
- Experience supporting federal civilian agencies, government contractors, or research organizations subject to FISMA requirements
- Experience serving in roles such as ISSO, Security Control Assessor, cybersecurity program lead, compliance lead, or similar senior cybersecurity positions
- Experience with Microsoft Azure, Microsoft 365, Entra ID, Defender, vulnerability management platforms, and cloud security technologies
- Knowledge of cybersecurity considerations associated with remote operations, scientific research environments, and geographically distributed infrastructure
- Experience leading teams, mentoring staff, and coordinating cross-functional cybersecurity initiatives
Compensation DataBattelle is committed to fair and equitable compensation practices. The salary range for this role is $160,000 - $180,000 per year, in addition to our comprehensive benefits package. A candidate's salary is determined by various factors, including but not limited to education, relevant work experience, skills, and certifications. Salary ranges may vary based on geographic location and market conditions.
Benefits: Live an Extraordinary LifeWe care about your well-being, not just on the job. Battelle offers comprehensive and competitive benefits to help you live your best life.
- Balance life through a compressed work schedule: Most of our team follows a flexible, compressed work schedule that allows for every other Friday off-giving you a dedicated day to accomplish things in your personal life without using vacation time.
- Enjoy enhanced work flexibility, including a hybrid arrangement: You have options for where and when you work. Our Together with Flexibility model allows you to work 60% in-office and 40% remote, with Monday and Tuesday as common in-office days, dependent on team and position needs.
- Take time to recharge: You get paid time off to support work-life balance and keep motivated.
- Prioritize wellness: Stay healthy with medical, dental, and vision coverage with wellness incentives and benefits plus a variety of optional supplemental benefits.
- Better together: Coverage for partners, gender-affirming care and health support, and family formation support.
- Build your financial future: Build financial stability with an industry-leading 401(k) retirement savings plan. For most employees, we put in 5 percent whether you contribute or not, and match your contributions on top of that.
- Advance your education: Tuition assistance is available to pursue higher education.
