Job details
Job type full-time
Full job description
Job description summary: the security governance analyst position is responsible for supporting internal, external, and client audits; assisting in developing and communication of security awareness programs; managing security risks within a grc, and assessing risks associated with third parties.
Essential duties & responsibilities:
Point of contact for matters relating to security governance & regulatory compliance.
Develops checklists, programs and/or guidelines to support security governance processes.
Coordinates with auditors including advising on scope, training of staff, interpretation of control requirements, and gathering of artifacts.
Serve as liaison with representatives from external audit firms.
Develops and reports on metrics related to audit support including remediation of audit findings and potential audit impacts.
Present risks and associated metrics to management
Gather client requirements and data which may include site surveys, system evaluations and get-well plans, system analysis, security analysis, and assessment of client network topology.
Supports the management of risk acceptance and exception processes to ensure the implications of risk acceptance are understood, risks are accepted at the correct level within the organization, and risk acceptances are tracked and reported on throughout their lifecycle.
Evaluates vendor security postures to determine if they have the potential to meet directives within security governance set.
Assists in designing and executing a security awareness program, including phishing campaigns.
Requirements & qualifications:
Bachelor`s degree in information systems, computer science, or a related field
Minimum of three years of it systems experience is required.
Knowledge of it audit techniques and industry standards.
Knowledge of it infrastructure and network operating systems.
Knowledge of various security frameworks and regulatory requirements, such as hitrust csf, iso 2700x, hipaa, nist 800-53, irs 1075, mars-e, cmsars, fedramp, and pci dss,
Knowledge of sarbanes oxley and ssae 16 standards and guidelines.
Strong organizational and time management skills.
Strong analytical and technical skills.
Ability to interact effectively with information technology groups and communicate with individuals at all levels of management.
Project management skills.
A cism, cisa, cissp, and/or cia is strongly preferred for consideration.
Works on problems of diverse scope where analysis of data requires evaluation of identifiable factors.
Demonstrates good judgement in selecting methods and techniques for obtaining solutions.
Networks with senior internal and external personnel in own area of expertise.
Job summary:
Essential duties and responsibilities:
Perform complex risk analyses and risk assessment.
Establish and satisfy information assurance (ia) and security requirements based upon the analysis of user, policy, regulatory, and resource demands.
Support customers at the highest levels in the development and implementation of doctrine and policies.
Apply know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures.
Perform analysis, design, and development of security features for system architectures.
Advise information system owners on client/project security policies and requirements for systems.
Interface with external customers to provide ia subject matter expertise throughout the system development lifecycle.
Keep abreast of emerging security technologies and make appropriate recommendations regarding the enhancement of the security posture of systems and their implementation.
Minimum requirements:
Typically requires a minimum of 8 years of related experience with a bachelor`s degree; or 6 years and a master`s degree; or a phd with 3 years experience; or equivalent experience.
Works on complex issues where analysis of situations or data requires an in depth evaluation of variable factors.
Exercises judgement in selecting methods, techniques, and evaluation criteria for obtaining results.
Networks with key contacts outside own area of expertise.
Develops solutions to a variety of complex problems.
Work requires considerable judgment and initiative.
Exerts some influence on the overall objectives and long-range goals of the organization.
Maximus introduction: since 1975, maximus has operated under its founding mission of helping government serve the people, enabling citizens around the globe to successfully engage with their governments at all levels and across a variety of health and human services programsMaximus delivers innovative business process management and technology solutions that contribute to improved outcomes for citizens and higher levels of productivity, accuracy, accountability and efficiency of government-sponsored programsWith more than 30,000 employees worldwide, maximus is a proud partner to government agencies in the united states, australia, canada, saudi arabia, singapore and the united kingdomFor more information, visit https://www.maximus.comEeo statement: eeo statement: active military service members, their spouses, and veteran candidates often embody the core competencies maximus deems essential, and bring a resiliency and dependability that greatly enhances our workforceWe recognize your unique skills and experiences, and want to provide you with a career path that allows you to continue making a difference for our countryWe’re proud of our connections to organizations dedicated to serving veterans and their familiesIf you are transitioning from military to civilian life, have prior service, are a retired veteran or a member of the national guard or reserves, or a spouse of an active military service member, we have challenging and rewarding career opportunities available for youA committed and diverse workforce is our most important resourceMaximus is an affirmative action/equal opportunity employerMaximus provides equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disabled status.
