Information Security Compliance Analyst IV - 530713
About The Position
The Information Security Compliance Analyst IV designs, develops, implements, and maintains information security compliance programs, policies, procedures, and controls for research systems. Leads and oversees compliance efforts to ensure adherence to federal, state, sponsor, and organizational requirements. Leads security control and risk assessments and validates compliance findings and remediation plans. Develops and documents compliance strategies for secure research environments. Serves as an escalation point for complex compliance issues. Provides expert guidance on remediation strategies. Advises senior leaders on compliance matters and security risks. Works with managed service providers and vendors to verify policy and procedure documentation, security control implementation, and Plans of Action and Milestone (POA&M) status.
Requirements
- High school diploma or GED and ten (10) years of IT experience to include four (4) years of IT security compliance or analysis experience; OR associate's degree and eight (8) years of IT experience to include four (4) years of IT security compliance or analysis experience; OR bachelor's degree and six (6) years of IT security compliance or analysis experience; OR master's degree and four (4) years of IT security compliance or analysis experience.
- Must be able to obtain and maintain security clearance.
- Must be a U.S. Citizen or U.S. Permanent Resident.
- Must have IAT Level III certification or ability to obtain within six (6) months of hire.
- Knowledge of protecting information and systems within Classified and Controlled Unclassified Information (CUI) environments.
- Good communication skills and ability to work closely with internal teams and customers to ensure positive outcomes.
Nice To Haves
- Experience gathering information from cloud platforms and on premises systems.
- Experience with compliance tools, frameworks, and procedures.
- Experience in higher education or defense research environments.
- Experience with NIST SP 800-53, NIST SP 800-171, NISPOM, secure facility compliance, and CCMC security control requirements.
- Experience with eMASS.
Responsibilities
- Designs, develops, implements, and maintains information security compliance programs, policies, procedures, and controls for research systems.
- Leads and oversees compliance efforts to ensure adherence to federal, state, sponsor, and organizational requirements.
- Leads security control and risk assessments and validates compliance findings and remediation plans.
- Develops and documents compliance strategies for secure research environments.
- Serves as an escalation point for complex compliance issues.
- Provides expert guidance on remediation strategies.
- Advises senior leaders on compliance matters and security risks.
- Works with managed service providers and vendors to verify policy and procedure documentation, security control implementation, and Plans of Action and Milestone (POA&M) status.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
High school or GED
