Information Security Analyst Sr Principal

Description

The role sits on the Assessment and Authorization team, supporting cyber missions for a federal government agency.

You will help achieve and keep the Authorization to Operate for enterprise systems, working on cloud technology and Commercial Solutions for Classified.

The company is a global technology and professional services firm serving U.S. government, defense and intelligence agencies, with 26,000 staff across 50+ countries.

Responsibilities

• Work through all phases of the NIST Risk Management Framework: categorize information and system components, conduct Privacy Impact Assessments, and develop risk management strategies.
• Create and maintain security documentation, including Security Control Implementation Statements.
• Develop, track and follow up on Plans of Action and Milestones (POAM).
• Gather the information needed to draft security controls, policies and process documents.
• Write Security Impact Analyses for system changes and update the System Security Plan, the Information Security Contingency Plan and other required security artifacts.
• Coordinate with federal government officials to obtain and maintain the system's Authorization to Operate.
• Ensure compliance with federal regulations and privacy requirements.
• Investigate information system security violations, incidents and vulnerabilities, and report findings to management as needed.
• Run periodic and ad-hoc audits and vulnerability assessments, including reviews of system scans, audit logs, user accounts, application access, file system integrity and compliance-related configurations.
• Take part in the Change Management process and work with cross-functional teams, customers and stakeholders to keep IT systems compliant with security requirements.

Requirements

• Experience with governance, risk and compliance (GRC) tools such as JCAM, Archangel or Xacta.
• Technical training, a certification or a degree.
• 8+ years of related experience.
• Skills in information system security, IT risk management, cyber security, compliance, change management, security control statements, security documentation and JCAM/Archangel/Xacta.
• Certifications: CISSP (ISC2) or CompTIA Security+ CE.
• Active Secret clearance required; Top Secret preferred.
• U.S. citizenship required.

Conditions

Onsite role in USA VA Sterling, 40 scheduled hours per week.

Travel of less than 10%.

Candidates must be able to obtain a Secret clearance; the current requirement is Secret, with no Public Trust or other clearance required.

The identity verification process uses biometrics and AI. You must be on camera for virtual interviews, and by proceeding you consent to the collection and use of your biometric data for identity verification and security purposes.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Medical plans, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) with pre- and post-tax contributions up to IRS limits and a company match.
• Full flex work weeks where possible and a range of paid time off, including vacation, sick, personal, holiday, parental, military, bereavement and jury duty leave.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• An AI-powered career tool that suggests career steps and learning, and an internal mobility team.
• Competitive pay and paid time off.
• Likely salary range of $153,000 to $207,000, based on experience, location and possibly contract terms; the actual pay may fall outside this range and is not guaranteed.