Job details
Salary $75,001 - $100,000 a year job type full-time
Full job description
Job id: 2114432
Location: washington , dc , us
Date posted: 2021-09-24
Category: cyber
Subcategory: cyber engineer
Schedule: full-time
Shift: day job
Travel: no
Minimum clearance required: public trust
Clearance level must be able to obtain: public trust
Potential for remote work: yes
Description
Saic is looking for a cybersecurity analyst to join our team supporting an important us government agency in the national capital regionThis is an exciting opportunity to work with a team responsible for it security risk and compliance support by providing direct support to the information system security and privacy officer (isspo) in managing and documenting the ongoing security posture of the agencyThe cybersecurity analyst will support the it management with poam and issue resolution log (irl) managementSpecifically, this job requires the following:
Support agency it governance, risk and compliance and audit activities.
Gather any control deficiencies identified during control development for poa&m consideration.
Identify and analyze issues resulting from control assessments and audit reports that require remediation activities.
Support audit finding analysis, and collaborate with sme’s and perform research to identify possible solutions.
Work with isspo to identify poam needs and organize poam development process.
Collaborate with subject matter experts and stakeholders to develop milestones.
Maintain the irl, update and report on periodic basis.
Monitor the irl actions and ensure the timely completions of the action, prioritize based on risk and escalate if necessary.
Organize poam and milestone development, irl review sessions, and status update meetings, and document meeting decisions and actions.
Conduct periodic review of milestone progress, analyze the pending tasks, and prioritize work with poa&m and milestone owners.
Review outputs from poa&ms to assess completeness and make recommendations for additional work needed or poa&m closure.
Assist with security impact analysis, risk assessments and acceptance process.
Support the pm by providing information for status reports, status briefings, schedules, project plans, etc., both in written and oral form.
Required skills:
Experience with national institute of standards and technology (nist) risk management and cybersecurity framework
Experience with fisma, nist 800-53, general it control implementation, assessment, and maintenance process
Familiarity with governance, risk and compliance (grc) frameworks and tools, such as, rsam, csam, or experience with sa&a tools
Ability to tailor information security processes and tools, based on ever evolving and changing landscapes, doctrine, and risk scenarios
Good understanding of office of management and budget (omb) circulars a-123 and a-130, federal manager’s financial integrity act (fmfia), fiscam processes and procedures
Fluency in both spoken and written english, including the ability to work with highly technical and specialized contentMust be able both prepare and deliver such content, verbally and in writing, but also comprehend such content from others, in both spoken and written form.
Ability to prepare deliverables with sufficient quality such that very few minor, or no, edits are required to be made prior to conveyance to the client
Quickly review the work products of others, employ your own knowledge of federal security doctrine, and ensure that timely and accurate feedback and recommended edits are delivered to the author(s)All work products should be ready for delivery to the client after only one review has been performed.
Ability to work in a fast-paced environment
Outstanding customer service skills
Ability to document processes as needed
Proficiency in explaining complex policies and protocols in simple terms
Stay up to date on information technology trends and security standards
Excellent analytical thinking and problem-solving skills to be able to assess potential risks and developing possible solutions.
Qualifications
Undergraduate degree with four years of related experience, or graduate degree with two years experience
Well versed in it controls and/or it security in a technical environment with a variety of it systems.
One or more current security certifications (cissp, cism, security+).
Covid policy: prospective and/or new employees will be required to adhere with saic`s vaccination policyFull vaccination will be required before the start of employment in order to work onsite at an saic locationIf applicable, prospective or new employees may seek an exemption to the vaccination requirement at contact us and must have an approved exemption prior to the start of their employmentEmployees working onsite at a customer location must comply with customer requirements which may include mandatory vaccination, mandatory attestation regarding one`s vaccination status and mandatory weekly or bi-weekly testing.
Target salary range: $75,001 - $100,000The estimate displayed represents the typical salary range for this position based on experience and other factors.
Saic® is a premier fortune 500® technology integrator driving our nation`s technology transformationOur robust portfolio of offerings across the defense, space, civilian, and intelligence markets includes secure high-end solutions in engineering, digital, artificial intelligence, and mission solutionsUsing our expertise and understanding of existing and emerging technologies, we integrate the best components from our own portfolio and our partner ecosystem to deliver innovative, effective, and efficient solutions that are critical to achieving our customers` missions.
We are more than 26,500 strong; driven by mission, united by purpose, and inspired by opportunitiesSaic is an equal opportunity employer, fostering a respectful work culture based on diversity, equity, and inclusion that values all contributorsHeadquartered in reston, virginia, saic has annual revenues of approximately $7.1 billionFor more information, visit saic.com.
