> Markdown version of [/jobs/ext/227245-information-assurance-analyst](https://www.wearedevelopers.com/jobs/ext/227245-information-assurance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Assurance Analyst

- **Company:** American General Securities Inc
- **Location:** Camp Springs, MD, United States
- **Experience:** Expert
- **Salary:** $79,040.0 - $87,360.0
- **Contract:** Permanent contract
- **Skills:** Software Documentation, Cyber Security, Databases, System Configuration, Information Technology, User Accounts
- **Published:** May 14, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=04d523ac9aa413a9

## About the Role

Do you have experience in NIST standards?, Do you have a Associate's degree?, * Associates Degree or higher in Information Technology/Cyber Security degree and/or minimum of 7+ years of experience

 * Experience with hardening and patching.
 * Experience with managing system configurations.
 * Experience working with NIST Risk Management Framework.
 * Ability to understand, interpret and implement NIST policy.
 * Experience with ACAS, eMASS and CMRS desirable.
 * Security+, CASP+, or CISSP certification (or comparable certification) required.

## Description

* Work with system owners and system administrators to audit standard operating procedures, checklists and policies.
 * Review and analyze audit logs to ensure compliance with the Security Technical Implementation Guide (STIG) and Information Assurance Vulnerability Alerts (IAVAs) in support of achieving and maintaining authorization to operate.
 * Review and audit system configuration management; including system documentation, user manuals, and database versions.
 * Define policies to ensure and audit control of system access, user accounts, and other best practice security controls are in place to maintain existing Authority To Operate (ATO), physical security, and required protection of sensitive or classified information.
 * Audit and manage-to-completion all outstanding open compliance items to completion and/or risk acceptance.
 * Review and ensure compliance with information security boundaries through interconnection security agreements and service level agreements.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Full-stack role-based authorization in 45 minutes](https://www.wearedevelopers.com/videos/312-full-stack-role-based-authorization-in-45-minutes)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)