5+ years of experience in information assurance and security analysis.
Active Secret Clearance required.
Certification: IAT Level 2 by project requirements.
Proficient in ACAS (Assured Compliance Assessment Solution) tools.
Strong understanding of risk management frameworks and compliance standards.
Responsibilities
Examine and evaluate internal IT controls for risk exposure.
Assist system administrators in troubleshooting security and network issues.
Plan and upgrade security measures to protect organizational data.
Test for system vulnerabilities and develop mitigation strategies.
Conduct IT audits and provide detailed reports on findings.
Prepare and deliver briefings for management and staff on security status.
Review and maintain compliance documentation for federal standards.
Benefits
Opportunities for career advancement within a government-related setting.
Access to ongoing training and professional development.
Supportive work environment focused on security and compliance.
Potential for flexible work arrangements depending on project needs.
Full Job Description
Title: Senior Information Assurance (IA) Analyst.
Location: Fort Meade MD
Clearance required: Secret Clearance
Candidate Clearance: Active Secret Clearance
Certification required by project: IAT Level 2
Requirements
Examine internal IT controls, evaluate the design and operational effectiveness, determine exposure to risk and develop remediation strategies for System Administrator (SA) implementation.
Assist SAs in troubleshooting security and network problems.
ACAS Experience required
Plan, implement, monitor and upgrade security measures for the protection of the organization's data, systems and networks.
Test and identify network and system vulnerabilities and assist in creating counteractive strategies to protect the network.
Conduct efficient and effective IT audit procedures.
Prepare briefings for SUBMEPP management and employees to be delivered in the weekly status report.
Perform regular audit testing and provide recommendations to SAs to help resolve findings.
Review, evaluate and test application controls.
Provide recommendations and guidance on identified security and control risks.
Complete and report for Federal Information Security Management Act (FISMA) compliance.
Work to ensure entries are maintained in the DoD IT Portfolio Repository (DITPR) Document for quarterly updates.
Prepare and submit DoD Risk Management Framework (RMF) packages quarterly depending on the package status
Review and monitor system security posture and requirements primarily outlined but not limited to CTOs, TASKORD, OPORD, IAVs, STIGs and other downward directed orders for system hardening
