[vc_row type=”vc_default” bg_type=”image” parallax_style=”vcpb-vz-jquery” bg_image_new=”id^51865|url^http://intelliworxit.com/wp-content/uploads/2017/06/careers.jpg|caption^Group of Business People Working on an Office Desk|alt^null|title^Group of Business People Working on an Office Desk|description^null” bg_image_repeat=”no-repeat” bg_override=”full” enable_overlay=”enable_overlay_value” overlay_color=”rgba(0,0,0,0.5)” overlay_pattern=”transperant” overlay_pattern_opacity=”25″ css=”.vc_custom_1501471719025{padding-top: 12% !important;padding-bottom: 12% !important;}”][vc_column css=”.vc_custom_1500062206519{margin-top: 10px !important;margin-bottom: 10px !important;}” offset=”vc_col-lg-offset-0 vc_col-lg-12 vc_col-md-offset-0 vc_col-md-12 vc_col-sm-offset-0 vc_col-xs-12″][ultimate_heading main_heading=”Cybersecurity Policy Analyst” main_heading_color=”#ffffff” spacer=”line_only” spacer_position=”middle” line_height=”3″ line_color=”#ffffff” main_heading_style=”font-weight:700;” main_heading_font_size=”desktop:60px;mobile_landscape:38px;mobile:30px;” main_heading_line_height=”desktop:60px;mobile_landscape:48px;mobile:40px;” main_heading_margin=”margin-bottom:15px;” line_width=”150″ main_heading_font_family=”font_family:Montserrat|font_call:Montserrat|variant:700″ margin_design_tab_text=””]
[/ultimate_heading][/vc_column][/vc_row][vc_row][vc_column][vc_empty_space height=”40px”][vc_custom_heading text=”Position Summary” use_theme_fonts=”yes”][vc_empty_space height=”20px”][vc_column_text]
The Cybersecurity Policy Analyst will assist the Director of Security and Infrastructure to achieve and maintain FedRAMP, FISMA and other government authorizations. They will assist with documentation of technical systems, managing system security plans, maintaining lists of vulnerabilities and remediation plans, performing risk analyses, routine security maintenance tasks, and understanding government requirements around NIST, FedRAMP and other security frameworks.
[/vc_column_text][vc_empty_space height=”40px”][vc_custom_heading text=”Position Details” use_theme_fonts=”yes”][vc_empty_space height=”20px”][vc_column_text]
Location: Virtual
Travel Required: No
Salary Range: Negotiable
Position Type: Full-time with benefits
Date Posted: April 24, 2018
Mandatory Job Requirements: Experience with IT security policy, security controls documentation, and risk analysis according to US federal government standards – with a heavy preference towards NIST, FISMA and FedRAMP knowledge and experience.
Reports to: Director of Security & Infrastructure
Security Screening: Moderate-level background check will be required
[/vc_column_text][vc_empty_space height=”40px”][vc_custom_heading text=”Major Responsibilities & Tasks” use_theme_fonts=”yes”][vc_empty_space height=”20px”][vc_column_text]
Major Responsibilities
Cybersecurity Policy Analyst tasks will include, but are not limited to, the following:
- ● Security Compliance: assist the security team with the tracking of vulnerabilities and remediation, routine monitoring tasks, risk analysis, compliance tracking, trends research and other duties that keep Intelliworx customers, systems, data and personnel safe.
● Security Documentation: assist the Security team with documentation of Intelliworx systems, system security plans (SSPs), interconnect and similar security agreements, infrastructure documentation, application documentation, configurations, disaster recovery and other relevant security policies and procedures with the goal of achieving and maintaining FedRAMP*, FISMA** and other government authorizations.
* FedRAMP – Federal Risk and Authorization Management Program
** FISMA – Federal Information Security Management Act
Major Tasks
- ● Maintain the confidentiality, integrity, and availability of all Intelliworx systems by helping the Intelliworx team to implement, track and measure various operational and technical security controls.
● Maintain all official FedRAMP and similar security documentation for Intelliworx systems.
● During FedRAMP, FISMA and other security assessments, organize the collection of artifacts to
validate Intelliworx’s security controls and systems.
● Maintain a complete and accurate inventory of all Intelliworx systems, system components and
their statuses.
● Manage daily security monitoring reports and keep up-to-date with security trends. Participate
in occasional on-call shifts.
● Manage daily, weekly, monthly and yearly tasks such as user account audits and documentation
reviews. Maintain the Intelliworx security calendar.
● Manage monthly, quarterly and yearly reports for continuous monitoring and other purposes.
● Maintain Intelliworx application vulnerability data and help to ensure that information is tracked
appropriately in documentation and ticketing systems.
● Perform routine risk analysis on system changes.
● Assist with the administration of Intelliworx employee security training. Help keep company
personnel apprised of relevant security concerns through the writing of security bulletins, etc.
[/vc_column_text][vc_empty_space height=”40px”][vc_custom_heading text=”Required Qualifications and Skills” use_theme_fonts=”yes”][vc_empty_space height=”20px”][vc_column_text]
● Experience with IT security controls, documentation and risk analysis according to US federal government standards (with a heavy preference towards NIST 800-53 knowledge and experience; with FedRAMP knowledge/experience desirable).
● At least 2-3 years of relevant IT compliance/security experience and, preferably, an Bachelor’s or higher degree from an accredited institution of higher learning in Information Technology or a related discipline.
● Excellent communication skills, particularly in compliance/security and technical writing.
● Ability to research and process complex government regulations, distill the meaning into simple
terms and then write concise documentation in accordance with those regulations.
● Technical knowledge and experience in IT security and related fields. For example, being
technical enough to understand what a sql injection is, but will not be required to roll out a fix in
code or make a change to a database schema to fix it.
● Ability to maintain focus and momentum in a document and detail-heavy role.
[/vc_column_text][vc_empty_space height=”40px”][vc_custom_heading text=”Desired Qualifications and Skills” use_theme_fonts=”yes”][vc_empty_space height=”20px”][vc_column_text]
- ● The ability to act as an advocate for following government regulation and processes
● Working with an agile team is an absolute must – willing to approach situations from a security
regulatory perspective and assist others with navigating complex processes so that those
employees may focus on efficiently executing their duties.
● GSEC, CISA, Security + or similar security accreditation preferred.
● Superior organizational skills and detail orientation.
● Ability to work in an unstructured and goal oriented environment where the focus is to
accomplish assigned tasks and not to clock hours.
● Ability to adapt to a flexible work schedule that includes after-hours work if needed.
[/vc_column_text][vc_empty_space height=”40px”][vc_custom_heading text=”Submission Instructions” use_theme_fonts=”yes”][vc_empty_space height=”20px”][vc_column_text]E-mail: leanne.hankey@intelliworxit.com
Email Subject Line: Contracts Manager/Administrator
This position has a scheduled start date of Mon, May 30 (preferably sooner)[/vc_column_text][vc_empty_space height=”40px”][/vc_column][/vc_row][vc_row][vc_column][/vc_column][/vc_row]