Active Secret clearance required; must be able to obtain TSA clearance
Knowledge of the NIST Risk Management Framework (RMF) and cybersecurity compliance principles
Experience conducting Security Impact Analyses (SIAs) and risk assessments
Proficient in reviewing RMF artifacts and security documentation
Familiarity with security control assessments and risk analysis methodologies
Strong analytical, problem-solving, and communication skills
Responsibilities
Conduct Security Impact Analyses (SIAs) for Requests for Change (RFCs)
Review RMF artifacts and security documentation to support risk management
Assess system designs and emerging technologies for security compliance
Support security control assessments and evaluate control effectiveness
Perform cybersecurity risk analyses and provide compliance recommendations
Analyze scan results and compliance data to identify risks
Document assessment activities and stakeholder discussions
Benefits
Opportunity to work with TSA's Governance, Risk, and Compliance mission
Engagement in critical cybersecurity governance and risk management activities
Chance to contribute to the security of national information systems
Professional development opportunities in cybersecurity and risk management
Collaborative work environment with a focus on innovation and security
Full Job Description
***AWARD PENDING***
Zen Strategics, a Titan Technologies company, is seeking a Security Impact Analysis (SIA) Engineer to support TSA's Governance, Risk, and Compliance (GRC) mission. The position will assist in safeguarding the availability, integrity, and confidentiality of information systems through cybersecurity governance, risk management, security assessment, and compliance activities that support TSA's Information Assurance and Cybersecurity Division.
Duties and Responsibilities:
Conduct Security Impact Analyses (SIAs) and assess Requests for Change (RFCs) to evaluate potential cybersecurity impacts to TSA information systems.
Review and analyze RMF artifacts, security documentation, and supporting system records to support risk management and authorization activities.
Assess system designs, technical solutions, implementation approaches, and emerging technologies for security, compliance, and risk considerations.
Support security control assessments and evaluate the effectiveness of controls in accordance with established assessment methodologies.
Perform cybersecurity risk analyses and provide recommendations to support authorization decisions and compliance requirements.
Review network and infrastructure components as part of technical and security impact assessments.
Analyze scan results, assessment findings, and compliance data to identify risks and recommend corrective actions.
Support the development and improvement of Security Authorization (SA) and Ongoing Authorization (OA) processes and procedures.
Document assessment activities, findings, recommendations, and stakeholder discussions.
You MUST have:
Active Secret clearance required; Must be able to obtain TSA clearance
Knowledge of the NIST Risk Management Framework (RMF), cybersecurity compliance, and risk management principles.
