Systems Analyst

Essential duties and responsibilities include the following. Other duties may be assigned.

• Conducts annual security controls effectiveness testing and manages the entire assessment lifecycle, including interfacing significantly with system owners and ISSOs in obtaining the system ATO.
• Assists system owners in developing security authorization packages that are fully compliant with National Institute of Standards and Technology (NIST) guidelines and organizational defined standards including: NIST SP-800-53, -30, -37, -115, at a minimum.
• In depth understanding of all NIST SP-800-53 rev5 controls and FedRAMP to ensure proficiency in conducting efficient assessments (interview, exam, testing).
• Evaluates the system documentation such as the SSP, ISCP, IRP, CMP, and SCRMP.
• Verifies the written SSP for compliance against the agency requirements and documents gaps.
• Evaluates the system scan reports for vulnerability and compliance.
• Documents findings and provides remediation recommendations on all applicable systems in accordance with established policies and procedures.
• Brief system stakeholders on findings to include, at a minimum, corrective recommendations for deficiencies, and POA&M explanations to correct deficiencies.
• Develops and authors various documents such as kick-off slides, security assessment plans, and security assessment reports.
• Proficient in Microsoft Office (Word, Excel, PowerPoint, etc.) and project management tool (i.e., JIRA).
• Manages each assessment as a project and ensures progress and proactive management and escalation, if needed.
• Proficient with a GRC tool (i.e., Archer).
• Responsible for aiding in own self-development by being available and receptive to all training made available by the company.
• Plans daily activities within the guidelines of company policy, job description and supervisor’s instruction in such a way as to maximize personal output.
• Responsible for keeping own immediate work area in a neat and orderly condition to ensure safety of self and co-workers. Will report any unsafe conditions and/or practices to the appropriate supervisor and human resources. Will immediately correct any unsafe conditions to the best of own ability.
• Promotes and encourages a culture of compliance with all applicable rules (federal, state, local, Federal Acquisition Regulations, Code of Federal Regulations, Prime Contract requirements, etc.) for themselves and the company as a whole. Fosters an environment in which they will report any violations or reasonably suspected violation of RELI policy, FAR, and/or CFR and are comfortable discussing the myriad compliance, conflict, FAR, CFR, etc. issues that arise during the performance of a government contract.

• Bachelor’s degree in Computer Science or a related field of study and a minimum of eight (8) years’ relevant experience, or equivalent combination of education / experience.
• Must have at least eight years (8) of information security experience and with at least four (4) years of certification and accreditation (C&A) compliance / Security Assurance (SA) experience (NIST based).

CERTIFICATES, LICENSES, REGISTRATION

• CGRC (CAP), CRISC, CISSP, CISM, CISA, Security+, Network+ and/or other related cybersecurity certifications required.

JOB SPECIFIC KNOWLEDGE / SKILLS / ABILITIES

• In depth knowledge of NIST SP 800 series and FedRAMP guidance and standards.
• Highly organized with ability to effectively manage multiple projects and priorities.
• Ability to work in a fast-paced environment and to learn and apply new knowledge and techniques related to incident response and continuous monitoring capabilities.
• Ability to effectively work both independently and in a team environment for the successful achievement of goals.
• Excellent verbal and written communications skills with ability to prepare quality reports and effectively communicate / interact with a wide variety of technical and non-technical audiences (i.e., customers, team members, management, and federal staff).
• Excellent critical thinking skills with ability to identify, analyze and resolve problems / complex issues.
• Working knowledge and understanding of OMB, FISMA, FIPS, HIPPA and other federal regulations and requirements associated with Information Security.
• Knowledgeable of security-related processes with respect to Federal risk and compliance regulations best practices.
• Ability to read, analyze, and interpret common information systems security documents.
• Expert computer skills with advanced proficiency in a Windows and Linux based computer environment.

The annual salary range for this position is $85,000 to $95,000. Actual compensation will depend on a range of factors, including but not limited to the individual’s skills, experience, qualifications, certifications, location, other business and organizational needs, and applicable employment laws. The estimate displayed represents the typical salary range for this position and is just one component of the total compensation package for employees. RELI Group provides a variety of additional benefits to its employees. For additional details on the benefits that RELI Group offers click here