IT Compliance Analyst

About the role

Client Solution Architects (CSA) is seeking an IT Compliance Analyst to join our growing company in support of our Navy client onsite at our Pensacola, FL location. This person will provide package support per Naval Education and Training Command’s continuous monitoring guidance.

Responsibilities

• Establish periodic meetings and meet with NETC Cyber RMF Team to discuss RMF timelines, tasks, and deliverables
• Maintain eMASS Record
• Maintain key artifacts:
  • Package hardware/software lists, diagrams, etc.
  • Categorization Form
  • Contingency Plan (CP)
  • Disaster Recovery Plan (DRP)
  • Incident Response Plan (IRP)
  • Vulnerability and Patch Management Plan
  • Privacy Impact Assessment (PIA)
  • System Level Continuous Monitoring (SLCM) Strategy
• Ensure monthly scans are conducted per SCA Testing Guidance
• Ensure all assets in hardware are scanned and credentialed
• Process scans utilizing the eMASSter tool
• Ensure all applicable STIGs are conducted for all assets in the hardware list
• Ensure all quarterly updated applicable STIGs from DISA website are implemented
• Review findings and associate each with applicable affected security control
• Update POAM items
• Perform Web Risk Assessment (WRA) Scan (if applicable)
• Support ATO modifications (use case)

Requirements

• Must possess and maintain an active Secret Clearance; must be able to meet security investigation and eligibility requirements for access to classified information
• Minimum education: High School Diploma or equivalent
• Three (3) or more years of experience executing the NIST Risk Management Framework (RMF) and/or the DoD Information Assurance Workforce (CSWF) baseline certification at IAM Level I or a higher-level certification
• Acceptable certifications include Security+ CE, CAP, CND, GSLC, Cloud+, and HCISPP
• IA Contractor Training and Certification and Computing Environment (CE) certification may be required at the task order level
• Experience supporting the security Assessment and Authorization/ATO process
• Experience reviewing, comprehending, and documenting findings from ACAS (Assured Compliance Assessment Solution) Reports
• Experience with SCAP (Security Content Automation Protocol)
• Experience with DoD Architecture Framework (DoDAF) standards and assessments of enterprise information security architecture, processes, procedures, activities, and operations
• Experience performing cyber security risk assessments and identifying, verifying, and consolidating specific vulnerabilities, causes, analysis of alternatives, and identification of appropriate corrective actions
• Experience evaluating Security Technical Implementation Guides (STIGs) to determine applicability to systems and assets
• Functional expertise with Microsoft Office suite of products, including Word, Excel, PowerPoint, Visio, and Project

Qualifications

• BA or BS degree from an accredited institution in a related field (e.g., Management Information Systems, Information Technology, Computer Science, Math, Business, Engineering, or Physical Science)
• Prior experience with DoD Information Assurance Certification and Accreditation Program (DIACAP)
• IT project management experience supporting Navy or DoD network systems
• Excellent oral and written communication skills, including drafting, reviewing, and editing technical graphs, briefs, or documents
• Detail oriented with strong critical thinking in areas of IT process analysis and process improvement
• Ability to coordinate and work well with others
• Working knowledge of Microsoft Visio, including the ability to create and maintain detailed diagrams and workflow visualizations in support of operational and technical requirements

Physical Requirements

• Sit for extended periods of time and work at a computer workstation
• Use hands and fingers to operate keyboards, mice, and other input devices
• Communicate effectively, both verbally and in writing
• Specific vision abilities may include close vision, distance vision, depth perception, and the ability to adjust focus
• Stand, walk, bend, or reach; access equipment located in data centers, offices, or under desks
• Lift and/or move equipment weighing up to 25 pounds
• Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions, in accordance with the Americans with Disabilities Act (ADA)