empty

DSS IT Security Analyst 2

Advanced Network Consulting

Job Description

Posted on: 
September 17, 2024

Summary and company overview

Summary

local candidates strongly preferred.

Participate as a security analyst assigned to IT projects tasked with gathering and reviewing artifacts as part of the controls assessment process related to Commonwealth SEC530 and IRS PUB1075 security standards.

Will participate as a member of the project team reviewing user stories to identify the necessary security controls to be included for success criteria. Will assist the project team in identifying the necessary deliverables and artifacts which demonstrate control implementation for the user stories.

Coordinate artifact approval with agency Information Security and Risk Management (ISRM) team. Support the identification and documentation of Plan of Actions and Milestones for controls not met with Technology Service Cyber Security division and project team.

Responsibilities

NA

Job Requirements

Required Qualifications:

  • Work experience with information security programs in regulated industries such as government, healthcare, and/or financial services--Required 6 Years
  • Work experience with analyzing and supporting the implementation of information security and privacy controls based on NIST 800-53--Required 6 Years
  • Experience working with agile-based methodologies--Required 6 Years
  • Experience in consulting and supporting technical staff in implementing security controls based on NIST 800-53--Required 6 Years
  • Experience in supporting system integration for payment processing requiring an understanding of NACHA, EFT, PCI, and similar security requirements--Required 6 Years

Preferred Qualifications:

NA

Additional commentary

NA

Summary and company overview

Summary

local candidates strongly preferred.

Participate as a security analyst assigned to IT projects tasked with gathering and reviewing artifacts as part of the controls assessment process related to Commonwealth SEC530 and IRS PUB1075 security standards.

Will participate as a member of the project team reviewing user stories to identify the necessary security controls to be included for success criteria. Will assist the project team in identifying the necessary deliverables and artifacts which demonstrate control implementation for the user stories.

Coordinate artifact approval with agency Information Security and Risk Management (ISRM) team. Support the identification and documentation of Plan of Actions and Milestones for controls not met with Technology Service Cyber Security division and project team.

Apply now