IT Security Analyst IV

Battelle•Columbus, OH

5d•$160,000 - $180,000•Remote

About The Position

Battelle delivers when others can’t. We conduct research and development, manage national laboratories, design and manufacture products and deliver critical services for our clients—whether they are a multi-national corporation, a small start-up or a government agency. We recognize and appreciate the value and contributions of individuals from a wide range of backgrounds and experiences and welcome all qualified individuals to apply. Job Summary We are currently seeking an IT Security Analyst IV. This position is a full-time opportunity located remotely. The IT Security Analyst IV serves as a cybersecurity subject matter expert for the Arctic Research Support and Logistics Services (ARSLS) program and Battelle Arctic Research Operations (ARO). Under minimal supervision, this role leads the implementation, assessment, documentation, and continual improvement of cybersecurity and compliance programs supporting federal information systems, cloud environments, research platforms, and remote Arctic operations. The position provides advanced expertise in FISMA, NIST 800-53, Risk Management Framework (RMF), vulnerability management, cybersecurity governance, risk management, and security operations to ensure the confidentiality, integrity, and availability of mission-critical systems and data.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field, and eight (8) years of relevant experience; or an equivalent combination of education and experience
Demonstrated experience supporting federal cybersecurity compliance programs, including implementation and assessment of NIST 800-53 security controls
Experience with FISMA compliance, Risk Management Framework (RMF), continuous monitoring, vulnerability management, and security assessments
Experience developing and maintaining cybersecurity documentation, policies, procedures, risk assessments, and compliance artifacts
Strong understanding of cybersecurity principles, identity and access management, cloud security, infrastructure security, and enterprise security architecture
Experience leading cybersecurity projects and coordinating activities across technical and non-technical teams
Ability to communicate cybersecurity risks and recommendations effectively to technical staff, management, and external stakeholders
Prior experience in information security, cybersecurity operations, governance, risk management, or compliance functions
Must be a U.S. citizen

Nice To Haves

Certified Information Systems Security Professional (CISSP)
Additional cybersecurity certifications such as CISM, CRISC, CGRC (formerly CAP), Security+, GIAC, or equivalent
Experience supporting federal civilian agencies, government contractors, or research organizations subject to FISMA requirements
Experience serving in roles such as ISSO, Security Control Assessor, cybersecurity program lead, compliance lead, or similar senior cybersecurity positions
Experience with Microsoft Azure, Microsoft 365, Entra ID, Defender, vulnerability management platforms, and cloud security technologies
Knowledge of cybersecurity considerations associated with remote operations, scientific research environments, and geographically distributed infrastructure
Experience leading teams, mentoring staff, and coordinating cross-functional cybersecurity initiatives

Responsibilities

Lead the implementation, assessment, monitoring, and sustainment of cybersecurity controls to maintain compliance with FISMA, NIST 800-53, and federal Risk Management Framework (RMF) requirements
Coordinate cybersecurity assessments, audits, and authorization activities with internal stakeholders, external assessors, federal agencies, and corporate cybersecurity teams
Lead cybersecurity projects and initiatives, ensuring objectives are achieved within scope, schedule, and budget constraints
Conduct security assessments, control reviews, vulnerability assessments, and risk analyses to evaluate the effectiveness of cybersecurity controls and identify areas for improvement
Develop and maintain security documentation, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, procedures, standards, and compliance artifacts
Lead continuous monitoring activities including vulnerability management, remediation tracking, configuration compliance validation, security metrics collection, and reporting
Collaborate with infrastructure, cloud, networking, and application teams to design and implement secure solutions that meet business and federal compliance requirements
Evaluate emerging technologies, cloud services, applications, and operational initiatives to identify cybersecurity risks and recommend appropriate mitigations
Support incident response activities including security investigations, root cause analysis, corrective action planning, and implementation of security improvements
Serve as a cybersecurity advisor to system owners, project teams, program leadership, and stakeholders regarding cybersecurity strategy, risk management, compliance requirements, and security best practices
Provide mentorship, guidance, and technical leadership to junior cybersecurity and IT staff
Support cybersecurity activities across geographically dispersed facilities, remote field sites, cloud platforms, and Arctic communications infrastructure