Senior Information Security Analyst - Short term contract

IntePros Federal

19h • Hybrid

About The Position

IntePros Federal is seeking a talented Senior Information Security Analyst to support the Department of Justice (DOJ); Information Security & Validation Staff (ISVS) in delivering advanced cybersecurity governance, risk management, and compliance (GRC) services for the Judiciary's COO offices. This is a short-term contract starting mid April.
This position executes and advises on Risk Management Framework (RMF) processes, assesses security controls, and develops documentation to ensure system confidentiality, integrity, and availability. The analyst applies expertise in NIST and Judiciary Information Security Framework (JISF) standards to plan, implement, and monitor security measures across enterprise systems, supporting both ongoing operations and new system authorizations.

Requirements

• Minimum of 5-7 years of professional experience.
• Strong knowledge of RMF processes and federal cybersecurity standards, including NIST SP 800-53, SP 800-37, and SP 800-137.
• Proficiency in developing and maintaining standardized security documentation in compliance with GRC frameworks.
• Experience with vulnerability management, risk mitigation, and security reporting.
• Ability to effectively communicate technical security requirements to diverse audiences, including executives and technical teams.
• Experience is directly related information security experience, including RMF and GRC responsibilities.

Nice To Haves

• CISSP, CISM, Certified in Governance, Risk and Compliance (CGRC), Security+, or equivalent DoD 8570/8140 certification.
• Bachelors degree

Responsibilities

• Perform advanced RMF activities, including system preparation, security categorization, control selection and tailoring, control implementation, and continuous monitoring.
• Develop, review, and maintain security documentation such as System Security Plans (SSPs), Security Impact Analyses (SIAs), POA&Ms, Risk Mitigation Plans (RMPs), and Incident Response Plans (IRPs).
• Conduct vulnerability assessments, risk analyses, and FedRAMP-related security reviews.
• Provide recommendations for risk mitigation, control enhancements, and compliance process improvements.
• Monitor security controls for effectiveness, evaluate changes to systems and environments, and update authorization packages accordingly.
• Generate recurring reports, including Critical Security Controls Status Reports, Executive Dashboards, and Executive Risk Reports, using GRC tools such as CSAM.
• Collaborate with stakeholders to ensure that common controls, requirements allocation, and business processes are documented and aligned with enterprise policy.
• Support incident response, contingency planning, and tabletop exercises to validate readiness and resiliency.

What This Job Offers

• Career Level: Mid Level
• Education Level: No Education Listed