Security Analyst - Consultant (Information Systems Security Officer - ISSO)

The Security Analyst - Consultant (ISSO) will serve as a senior cybersecurity consultant within the Client Office of Cybersecurity. The role is responsible for leading and supporting security, risk, and compliance activities for complex information systems supporting Medicaid and other agency programs. The ISSO will ensure alignment with Federal, State, and Agency security requirements including FISMA, NIST, CMS MARS-E, and HIPAA., Security & Compliance Leadership

• Lead and support FISMA / NIST RMF-compliant security programs
• Develop, maintain, and review RMF artifacts including SSPs, PIAs, ISAs, CMAs, and related documentation
• Integrate RMF and A&A activities into the System Development Life Cycle (SDLC)
• Serve as a cybersecurity advisor to agency leadership, business units, and vendors

Risk Assessment & Technical Reviews

• Perform architectural and security risk reviews for systems and applications
• Review network designs, data flows, and access control models
• Review firewall rule requests (ports, protocols, services)
• Evaluate configuration deviation requests and vulnerability management activities
• Audit and assess internal systems and third-party/vendor security controls

Audit, Documentation & Stakeholder Support

• Serve as primary point of contact for third-party audits and assessments
• Review contracts, Business Associate Agreements, and data-sharing agreements for security compliance
• Document findings and recommendations using Microsoft Office, Archer eGRC, Service Manager, Atlassian, Bizagi, and related tools
• Collaborate across multiple teams and vendors to support agency cybersecurity initiatives

• 5+ years of experience in IT working with and/or auditing:

• IBM System 390 / zSeries
• Windows and Linux servers
• Relational and Non-Relational databases
• Networking infrastructure
• Web-based applications
• Prior experience working within a FISMA-compliant program
• Prior experience working with eGRC systems
• Strong working knowledge of FISMA, NIST, CMS MARS-E, and HIPAA Security and Privacy
• Ability to work independently and collaboratively in a team environment
• Strong written and verbal communication skills

Required Certifications:

• ISC(2), ISACA, SANS GIAC, and/or other recognized Information Security certification (Required)

Preferred Skills & Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or related field

OR

• 10+ years of experience in the field or a related area
• Prior ITIL experience in Information Security Management
• Experience with SIEM, IAM, cloud security, and vendor risk management
• Public sector or government experience preferred

About US: InterSources Inc. is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18+ years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

Allied Universal

• Washington DC
• $25.00-33.00 per hour Overview Company Overview: Allied Universal®, North America’s leading security and facility services company, offers rewarding careers that provide you a sense of purpose. Whil…