Information System Security Analyst Senior

TISTA is seeking an experienced Information Security Analyst to join our team that has a strong background in IT Security and Privacy.

TISTA associates enjoy above Industry Healthcare Benefits, Remote Working Options, Paid Time Off, Training/Certification opportunities, Healthcare Savings Account & Flexible Savings Account, Paid Life Insurance, Short-term & Long-term Disability, 401K Match, Tuition Reimbursement, Employee Assistance Program, Paid Holidays, Military Leave, and much more!

• Demonstrates proficiency developing, managing and executing Assessment & Authorization (A&A) and Authority to Operate (ATO) packages.
• Experience in technical writing, specific to security-related documents, policies and procedures.
• Experience with developing and maintaining System Security Plans (SSP), Contingency Plans (CP), Configuration Management Plans (CMP), Business Impact Analysis (BIA).
• Experience with developing and maintaining Privacy related documentation including Privacy Threshold Analysis (PTA) and Privacy Impact Assessment (PIA).
• Develop and maintain SORN (system of records notice).
• Demonstrate strong knowledge of migrating and securing IT systems in the cloud.
• Experience with High Value Assets (HVA) systems and their security controls.
• Experience with Privacy related policy and compliance.
• Experience with developing risk impact assessments and risk mitigation strategies.
• Strong project management skills and familiarity with standard project management methodologies such as Agile and Scrum.
• Comfortable leading meetings.
• Strong familiarity with NIST Special Publications and guidance, specifically 800-53 rev. 4/rev. 5 and the NIST Risk Management Framework.
• Strong problem solving and analysis skills, self-motivated, leader and able to work and communicate in a team environment.

• A minimum of 5-7 years of demonstrated experience in the Information Security (Cybersecurity or Information Assurance) field.
• Experience with leading and directing the work of others.
• Demonstrates proficiency with developing, maintaining and managing Authorizations and Assessments (A&A) and Authority to Operate (ATO) packages.
• Knowledge of standard concepts, practices, and procedures within program management.
• Demonstrates proficiency in IT systems cloud migrations and securing systems in the cloud.
• A holistic understanding and knowledge of the Risk Management Framework (RMF) as defined by National Institute of Technology (NIST) Special Publication (SP) 800-53 (current revision), Recommended Security Controls for Federal Information Systems and NIST SP 800-53A Revision 4, Guide for Assessing the Security Controls in Federal Information Systems.
• Strong problem-solving and analysis skills, self-motivated, and able to work and communicate in a team environment.
• Excellent documentation skills - redacted samples may be requested.
• Excellent oral and written communication skills.

Desired Certifications:

• Security+
• Certified Authorization Professional (CAP)
• Certified in Governance, Risk and Compliance (CGRC)
• Certified Information Privacy Professional (CIPP)
• Cloud Certification (Azure, AWS, CCSP, Cloud+, etc.)
• Certified Information System Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Project Management Professional (PMP)

Education:

• Bachelor's degree or higher in computer science, Information Technology, Information Security, or similar fields.

Clearance:

• The ability to pass a Tier 4/HIGH Background Investigation. US citizens or permanent residents highly preferred.

Location:

• Remote, USA.

Pay Range:

• The pay for this position ranges from $85,730 to $102,500.
• The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, and location.
• Also, certain positions are eligible for additional forms of compensation, such as bonuses.
• TISTA associates are eligible to participate in our comprehensive benefits plan! More information can be found here: https://tistatech.com/working-at-tista/