NIST Security Analyst

About the role

Neos is seeking an IT Risk Analyst for a long-term project for our client in Austin, TX. This position requires working on-site 5 days per week and is open only to candidates currently residing in the Austin area (within a 50-mile radius).

Responsibilities

• Lead the team responsible for elicitation, analysis and documentation of systems and state operations
• Coordinate and facilitate meetings with Medicaid/CHIP Services (MCS) and IT stakeholders
• Evaluate over 50 systems to complete the Information Security Program Plan, Information System Security Plans and associated Risk Assessments
• Coordinate with IT and business areas to identify risks, confirm controls, and make recommendations for improvement
• Identify system interdependencies and confirm classification of data in a HIPAA environment
• Serve as team lead over analysts
• Work with subject matter experts across the MCS system to collect and update business and system data
• Gather information on HHS data source systems which interface to MCS systems
• Complete Information Security Program Plan, Information System Security Plans and associated Risk Assessments using HHS defined security tools to identify risks and confirm current controls

Requirements

• 4 years – Experience with the National Institute of Standards Technology (NIST) 800-37 Risk Management Framework and 800-53 Security controls
• 4 years – Supporting various compliance audits including, PCI, SOC, HIPAA and ISO
• 4 years – Data Privacy experience
• 3 years – Proven ability to work successfully with technical and non-technical groups, and manage multiple responsibilities
• 2 years – Writing Information System Security Plans
• Strong – Communication, analytical and interpersonal skills at all levels
• Strong – Ability to work on multiple projects or project assignments
• Bachelor's degree in Computer Science, Systems Engineering or equivalent experience

Preferred qualifications

• 3 years – Experience facilitating productive meetings to formulate business requirements and communicate stakeholder needs to technical staff
• Industry recognized certification such as CISSP, CISA, GCIH
• Knowledge of Medicaid and/or CHIP programs and policy
• 2 years – Working with Health and Human Services or other Medicaid centric organizations