Apply
Description
- The Risk Analyst will independently perform risk analysis/risk assessments and define security requirements for all ISD support IT systems.
- Design, develop, and implement solutions to IT system security requirements.
- As well as gather and organize technical information about existing security products, authorized vulnerability management policies, and procedures.
- Assist the Security Controls Auditor in validating the security controls and the Risk Management Framework eMASS inputs for all ISD managed and maintained systems and will conduct an analysis of system vulnerability management, remediation solutions, and develop the necessary plan of action and milestones.
- Ensure the risk analysis is consistent with applicable regulations and policies, while also ensuring the analysis will support internal or external compliance.
- Evaluate, tests, monitor, and maintain information security policies, procedures, and systems such as hardware, firmware, and software.
- The incumbent will ensure security design, controls, and procedures are aligned with information security standards and are appropriate to mitigate risk of exposure. Identifies security violations, determines cause, and implements procedures to prevent future incidents. Under direct supervision, performs routine assignments as an entry level professional.
- Develops core job competencies with existing procedures by solving standard problems.
- Manage multiple concurrent project tasks, develop schedules, and formulate plans and milestones and draft correspondence, reports, white papers, minutes, spreadsheets, communications products, briefs, and other documentation as needed.
- Identify and develop methods, plans, and documents to streamline operating procedures, reports, and systems to improve operations, achieve savings, and encourage long range planning to assure the program/project produces results in a cost-effective manner.
Requirements
Clearance: Active Secret Clearance Certification: Any IAT Level II; MUST possess CompTIA SEC+ or equivalent
- A Bachelor's degree in one of the following: Risk Management, Cyber Security, Business, Project Management, or a related area and Two (2) years' hands on experience in one in information security, cyber security, or related discipline. OR a High School Diploma with IT certification and Five (5) years' hands on experience in one in information security, cyber security, or related discipline.
- The applicant is preferred to have intermediate experience in Microsoft Office Suite
- Fluency in security control frameworks and risk models including NIST and CMMC.
- Experience performing compliance and risk assessments with NIST SP 800-171.
- Excellent customer service and organizational skills.
- Ability to control and facilitate meetings.
- Candidate must be able to work both independently and as part of a team.
About Us: CompQsoft Inc. Established in 1997, headquarters in Houston, TX and office in Leesburg, VA. CompQsoft offers a range of comprehensive Cyber Security, Infrastructure, Cloud solutions, ERP implementation, Business Intelligence, Application development, Ecommerce applications and Management consulting services. CompQsoft is Certified CMMI Level 3 practitioner for Development and Services, ISO 9001:2015, ISO 27001:2013 & ISO 200001:2011 Certified. CompQsoft is a fast growing company with a strategy and methodology that is strongly focused on the success of our clients, predominantly the Federal government. CompQsoft provides equal opportunity in all aspects of employment and in the working environment to all employees and applicants. CompQsoft does not take any nonmerit factors like race, color, religion, sex (gender), mental/physical disability, and age into account for purposes of recruitment, hiring and development.
|