Information Assurance Compliance Analyst

Job purpose

The Security Analyst, Staff position is responsible for coordination, oversight, execution and enhancement of consistent security practices for all information systems within the United States Antarctic Program (USAP). The Compliance Analyst will ensure effective information security controls are documented and delivered to safeguard USAP business operations, prevent unauthorized system access, and to protect sensitive information.

Duties and responsibilities

Provides support for all security compliance initiatives, such as:

• Evaluates proposed changes to the operational/ business systems and develops system security requirements
• Conducts security assessments to determine the effectives of planned and implemented security controls
• Manages and maintains configuration control over Security Assessment and Authorization (SA&A) packages Organizes and facilitates contingency planning exercises
• Responds to and manages audit requests and creation of deliverables
• Researches emerging security technologies
• Performs systems security evaluations, audits, and server logging reviews to verify secure operations
• Conducts continuous security reviews, recommends mitigations and corrective actions, and generates reports
• Supports Incident Response activities to mitigate damage, determine impact, and implement corrective actions.

This position delivers analysis and assessment of compliance with security and privacy laws, regulations, guidance, and direction, including the Federal Information Security Management Act (FISMA); National Institute of Standards and Technology (NIST) guidance; Federal Information Processing Standards (FIPS); applicable Office of Management and Budget (OMB) memoranda; and United States Antarctic Program (USAP) policies and instructions.

Qualifications

• Bachelor's degree from an accredited college in a related discipline, or equivalent experience/combined education, with 9 years of professional experience; or 7 years of professional experience with a related Master's degree.
• Current Information Security certification (e.g. CISM, CISSP, CompTIA Security+)
• Must have experience in system vulnerability assessments and developing certification and accreditation packages.
• Candidate must have experience with Federal Information Security Management Act (FISMA) requirements and National Institute of Standards and Technology (NIST) Risk Management Framework (RMF).

Competencies

• Technical Capacity.
• Organizational Skills.
• Strategic Thinking.
• Problem Solving/Analysis.

Physical requirements

U.S. Citizenship is required. (As required by the United States National Science Foundation)

Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

Position Expectations

PERIOD OF PERFORMANCE: March thru September 2018 (~6 months)

WORK LOCATION: 7400 S. Tucson Way, Centennial, Co 80112

HOUR OF OPERATION: Day shift 8am-5pm. Anticipate a 40hr. work week

Equal Opportunity Employer/Veterans/Disabled

Current Openings for Information Assurance Compliance Analyst Jobs at GHG Corporation

Department	Location	Employment Type

Get Notified of New Jobs at GHG Corporation