Develop, update, and maintain System Security Plans for the client’s applications and systems.
Work with program teams, Information Owners, and Custodians to gather control implementation evidence.
Ensure System Security Plans align with client’s office standards.
Plan and conduct Security Assessments to validate implementation and effectiveness of security controls.
Review technical, administrative, and operational evidence.
Document assessment results and track remediation activities.
Facilitate Risk Assessment workshops with Information Owners and Custodians.
Identify threats, vulnerabilities, likelihood, and impact.
Document risks, mitigation plans, and Risk-Based Decisions in RSA Archer.
Maintain security artifacts, risks, and remediation plans in RSA Archer GRC.
Support system authorization (ATO) activities and continuous monitoring.
Prepare audit and oversight evidence.
Produce leadership reports and security posture metrics.
Serve as liaison between program areas, technical teams, and CISO Office leadership.
Provide guidance and training on System Security Plans, Security Assessments, and Risk Assessment processes.
Other duties as assigned.

4 years of experience in cybersecurity GRC, system security planning, or information assurance.
4 years of Hands-on experience developing System Security Plans (SSPs), conducting Security Assessments, and facilitating Risk Assessments.
4 years of knowledge of NIST SP 800-53 and NIST Risk Management Framework.
4 years of experience using GRC platforms (RSA Archer preferred).
4 years of experience working with Information Owners and Custodians.
4 years of experience in technical writing and documentation.
Must be able to pass a background check.
May require additional background checks as required by projects and/or clients at any time during employment.
Exceptional interpersonal skills with the ability to communicate in a clear, professional, and articulate manner.
Exceptional verbal and written communication skills.
Possesses effective presentation skills
Excellent organizational, analytical, and problem-solving skills with high-level attention to detail.
Proven ability to multitask and prioritize in a fast past environment with changing priorities; adaptable to change and a quick learner.
Must be self-motivated and able to work well independently as well as on a multi-functional team.
Ability to handle sensitive and confidential information appropriately
Proficient in MS Office, Word, Outlook, PowerPoint, and Excel.

Network Security Analyst II

Key skills