Information Assurance Compliance Analyst

TITLE:    Information Assurance Compliance Analyst

REPORTS TO:  Supervisor, Desari Mattox  

SUMMARY STATEMENT: The Security Analyst, Staff position is responsible for coordination, oversight, execution and enhancement of consistent security practices for all information systems within the United States Antarctic Program (USAP). The Security Analyst will ensure effective information security controls are documented and delivered to safeguard USAP business operations, prevent unauthorized system access, and to protect sensitive information

PERIOD OF PERFORMANCE: December 2016 through May 2017 (~6 months)

WORK LOCATION: 7400 S. Tucson Way, Centennial, Co 80112

HOUR OF OPERATION: Day shift 8am-5pm and perform on-call rotations. Anticipate a 40hr. work week

TRAVEL: None

ESSENTIAL DUTIES AND RESPONSIBILITIES: Provides support for all security compliance initiatives, such

as:

• Evaluates proposed changes to the operational/ business systems and develops system security requirements
• Conducts security assessments to determine the effectives of planned and implemented security controls
• Manages and maintains configuration control over Security Assessment and Authorization (SA&A) and Certification & Accreditation (C&A) packages Organizes and facilitates contingency planning exercises
• Responds to and manages audit requests and creation of deliverables
• Researches emerging security technologies
• Performs systems security evaluations, audits, and server logging reviews to verify secure operations
• Conducts continuous security reviews, recommends mitigations and corrective actions, and generates reports
• Supports Incident Response activities to mitigate damage, determine impact, and implement corrective actions.

This position delivers analysis and assessment of compliance with security and privacy laws, regulations, guidance, and direction, including the Federal Information Security Management Act (FISMA); National Institute of Standards and Technology (NIST) guidance; Federal Information Processing Standards (FIPS); applicable Office of Management and Budget (OMB) memoranda; and United States Antarctic Program (USAP) policies and instructions.

EDUCATION:  Bachelor's degree from an accredited college in a related discipline, or equivalent experience/combined education, with 9 years of professional experience; or 7 years of professional experience with a related Master's degree.

CERTIFICATIONS AND/OR LICENSING REQUIREMENTS:  Current Information Security certification (e.g. CISM, CISSP, CompTIA Security+)

TRAINING:  Require an experienced professional.

EXPERIENCE: Must have experience in system vulnerability assessments and developing certification and accreditation packages.  Candidate must have experience with Federal Information Security Management Act (FISMA) requirements and National Institute of Standards and Technology (NIST) Risk Management Framework (RMF).

SUBCONTRACTOR PERSONNEL REQUIREMENTS:

• All Subcontractor employees hired as part of this SOW remain those of the Subcontractor at all times, and never of Leidos or the U.S. Government.
• The Subcontractor is specifically prohibited from hiring active duty military personnel, Leidos personnel, and other station personnel, on a part-time basis to perform work under this SOW. Neither party will attempt to hire any contract employees on the Ice from the other during the term of that employee's contract.
• The Subcontractor shall furnish the Leidos Subcontracts Administrator (or a designated representative) with the names of all personnel hired to perform work under this SOW.
• All personnel must be at least eighteen (18) years of age.
• All Subcontractor personnel shall maintain a neat and well-groomed appearance.
• All Subcontractor personnel are required to meet existing personnel behavior standards.
• Subcontractor shall notify station management should any of the following occur:
  • fire, or discharge of any fire extinguisher;
  • damage to facilities, or any misuse of equipment;
  • snowmobile racing or unauthorized vehicle use;
  • failure to follow any safety requirement or restriction;
  • unauthorized camping, or hiking off the flagged routes;
  • drunk and disorderly conduct, or unauthorized use of any controlled substance;
  • spills to the environment, including fuels, toxins, hazardous materials;
  • any event that has an impact on power, water, or waste water processes;
  • any fight, assault, altercation, or other serious behavioral events.
• Subcontractor personnel will maintain a clean work area. They are responsible for removal of trash, regardless of the source, within their work area, and up to 100 feet in all directions.
• Subcontractor personnel will support station volunteer initiatives such as mass casualty exercise, work center cleaning, dormitory pick-up, or helping in the dining facility.
• As needed, the inspector will attend regular meetings and will be responsible for taking notes and preparing meeting minutes as required to complete tasking under this SOW. Copies of these meeting minutes will be supplied to the Leidos Utilities Manager.
• Existing processes and Standard Operating Procedures (SOPs) are to be followed, unless having prior written exception, with approval from the Leidos technical contact on site. Standing SOPs include equipment operation and safety procedures. There will be no exceptions to safety procedures. Any failure to follow existing safety procedures must be reported immediately.

 EOE M/F/V

Current Openings for Information Assurance Compliance Analyst Jobs at GHG Corporation

Department	Location	Employment Type

Get Notified of New Jobs at GHG Corporation