RSA ARCHER GRC Analyst

About the role

This position is open to U.S. Citizens and permanent residents. This onsite role requires the selected candidate to work from an HHS office in Austin, Texas.

Responsibilities

• Provides highly advanced consultative and technical assistance regarding development and administration of the Archer eGRC platform.
• Collaborate with Information Security, Cyber Operations, Risk, Audit, and Compliance teams to design, implement, and support enterprise RSA Archer GRC solution.
• Perform platform administration, configuration, and optimization.
• Ability to scope workflows, implement APIs, perform system integration, data imports, scan ingestion, and connect ARCHER with BMC Helix, ServiceNow, PowerBI, and other ITSM platforms.
• Experience with system management, server maintenance, and knowledge of system development lifecycle practices.

Requirements

• Minimum Qualifications: Bachelor’s degree in information security, Information Technology, or related field, or equivalent experience on a year-for-year basis. Minimum of five (5) years of experience in cybersecurity governance, risk management, or compliance.
• Experience implementing RMF (Risk Management Framework) and security authorization processes.
• Experience working with enterprise GRC (Governance, Risk management, and Compliance) and IT service management tools.

Qualifications

• Knowledge of enterprise security program management using Enterprise Governance Risk and Compliance solutions.
• Knowledge of effective project management practices and ability to effectively manage multiple priorities within a security function providing services to numerous clients.
• Knowledge of compliance requirements including 1 TAC 202, HIPAA/HITECH, IRS Publication 1075, Social Security Administration requirements, Texas Business and Commerce Code, and Texas Health and Safety Code.
• Knowledge in analyzing, recommending, and developing enterprise-wide security policies, standards, and guidelines within appropriate organizational risk tolerances.
• Knowledge and understanding of audit principles for the coordination and advisement of appropriate management action plans that will address the cause of control deficiencies.
• Knowledge and understanding of security program deficiencies and articulating those deficiencies to stakeholders.
• Extensive knowledge of the control structures and application of controls.
• Knowledge and understanding of audit principles related to responding to IT and Security audits.
• Knowledgeable of National Institute of Standards and Technology (NIST) classes and families.
• Knowledge of compliance requirements including 1 TAC 202, HIPAA/HITECH, IRS Publication 1075, Social Security Administration requirements, Texas Business and Commerce Code, and Texas Health and Safety Code.
• Experience performing risk assessments.
• Professional presentation skills.
• Skill and demonstrated ability in interpersonal communications and collaboration as part of a team providing security services to multiple clients.
• Skill in critical thinking, root cause analysis and complex problem solving of information technology security threats relating to confidentiality, integrity and availability of agency data and systems.
• Skill in implementing enforcement of security policy within technology solutions.
• Skill in evaluating enterprise networks and systems for assurance of control requirements as specified by the IRS Publication 1075, Tax Information Security Guidelines for Federal, State and Local Agencies.
• Ability to manage the control assertion and corrective action plan processes including the coordination of status updates and report submission.
• Ability to maintain the security and integrity of critical infrastructure systems by preventing unauthorized access and ensuring compliance with laws and regulations related to national security and foreign ownership restrictions.

Skills and Abilities

• Knowledge of enterprise security program management using Enterprise Governance Risk and Compliance solutions.
• Knowledge of effective project management practices and ability to effectively manage multiple priorities within a security function providing services to numerous clients.
• Knowledge of compliance requirements including 1 TAC 202, HIPAA/HITECH, IRS Publication 1075, Social Security Administration requirements, Texas Business and Commerce Code, and Texas Health and Safety Code.
• Knowledge in analyzing, recommending, and developing enterprise-wide security policies, standards, and guidelines within appropriate organizational risk tolerances.
• Knowledge and understanding of audit principles for the coordination and advisement of appropriate management action plans that will address the cause of control deficiencies.
• Knowledge and understanding of security program deficiencies and articulating those deficiencies to stakeholders.
• Extensive knowledge of the control structures and application of controls.
• Knowledge and understanding of audit principles related to responding to IT and Security audits.
• Knowledgeable of National Institute of Standards and Technology (NIST) classes and families.
• Knowledge of compliance requirements including 1 TAC 202, HIPAA/HITECH, IRS Publication 1075, Social Security Administration requirements, Texas Business and Commerce Code, and Texas Health and Safety Code.
• Experience performing risk assessments.
• Professional presentation skills.
• Skill and demonstrated ability in interpersonal communications and collaboration as part of a team providing security services to multiple clients.
• Skill in critical thinking, root cause analysis and complex problem solving of information technology security threats relating to confidentiality, integrity and availability of agency data and systems.
• Skill in implementing enforcement of security policy within technology solutions.
• Skill in evaluating enterprise networks and systems for assurance of control requirements as specified by the IRS Publication 1075, Tax Information Security Guidelines for Federal, State and Local Agencies.
• Ability to manage the control assertion and corrective action plan processes including the coordination of status updates and report submission.
• Ability to maintain the security and integrity of critical infrastructure systems by preventing unauthorized access and ensuring compliance with laws and regulations related to national security and foreign ownership restrictions.

Pay

Salary Range: $7,015.16 - $10,416.66 Pay Frequency: Monthly Salary Group: TEXAS-B-27 Shift: Day Facility Location: Job Location City: AUSTIN Job Location Address: 701 W 51ST ST Other Locations: MOS Codes: 0605,0630,0631,0639,0670,0679,0681,1702,1705,1710,1720,1721,1799,2611,2659,8055,8858,14N,14NX,170A 170B,17A,17B,17C,17C0,17DX,17S,17SX,17X,181X,182X,183X,184X,1B4X1,1D7X1,1N4X1,255A,255N,255S,25B,25D 26A,26B,26Z,514A,5C0X1D,5C0X1N,5C0X1R,5C0X1S,5IX,681X,682X,683X,781X,782X,783X,784X,CTI,CTM,CTR,CWT CYB10,CYB11,CYB12,CYB13,CYB14,IS,ISM,ISS,IT,ITS

Schedule

Shift: Day Facility Location: Job Location City: AUSTIN Job Location Address: 701 W 51ST ST Other Locations: MOS Codes: 0605,0630,0631,0639,0670,0679,0681,1702,1705,1710,1720,1721,1799,2611,2659,8055,8858,14N,14NX,170A 170B,17A,17B,17C,17C0,17DX,17S,17SX,17X,181X,182X,183X,184X,1B4X1,1D7X1,1N4X1,255A,255N,255S,25B,25D 26A,26B,26Z,514A,5C0X1D,5C0X1N,5C0X1R,5C0X1S,5IX,681X,682X,683X,781X,782X,783X,784X,CTI,CTM,CTR,CWT CYB10,CYB11,CYB12,CYB13,CYB14,IS,ISM,ISS,IT,ITS