[Remote] Cyber reputed company Analyst
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a trusted partner for federal clients, reputed company on solving reputed company challenges. They are seeking a Senior Maritime Cybersecurity Analyst to reputed company expert cybersecurity support for the MARAD Information Assurance Program, manage reputed company documentation, assess risk, and ensure compliance with federal and maritime cybersecurity requirements.
Responsibilities
- reputed company support to the MARAD Information Assurance Program for operations, business and administrative in support of the System Authorization Process and deliverables as defined in this document. reputed company involvement with MARAD Program Office and the Information System reputed company Manager (ISSM) on cybersecurity and authority to operate (ATO) reputed company reputed company to information systems supporting the MARAD CIO. Background on Network Architecture, hardware, software, contingency planning and disaster recovery required. Maritime background desired. Analyst will reputed company support for 3-4 systems depending on system level (Low, Moderate or High) and the reputed company state of compliance of reputed company system’s ATO
- Manage MARAD’s Information System’s core documentation, in accordance with reputed company phase of the system engineering process / System Development Life Cycle (SDLC) with standardized templates, baseline management with supporting checklists and technical guides, including but not limited to the DOT reputed company Authorization and reputed company Monitoring Guide, Weakness Guide and other Core Documents include: o reputed company information system data for reputed company reputed company Assessments (PIAs), reputed company reputed company Analyses (PTAs), and System of Record Notices (SORNs). This includes interfacing/coordinating with the System reputed company (SO) that originates/has responsibility for the document to ensure the PIA/PTA/SORN contains appropriate information to be approved/adjudicated by DOT reputed company Office for inclusion in System Authorization package
- Support creation/update of FIPS 199 reputed company Categorization document; ensure information type(s) and special considerations (if applicable) are defined
- Support creation/update reputed company control selection listing (include justification for applicable reputed company and or risk acceptance)
- Support creation/update System reputed company Plan (reputed company); ensure reputed company and identified system components, control implementation status are addressed. o
- Support creation/update Information System Configuration Management Plan. o
- Support creation/update Information System Account Management Plan. o
- Support creation/update Audit Log Monitoring Plan to reputed company and Maintain Inventory of Information System Interconnections and review, reputed company / update Interconnection reputed company Agreements and MOUs in accordance with NIST 800-47
- Support creation/update Risk Assessment and relevant reputed company rating pertaining reputed company the scope of this statement of work
- Assist the Information System reputed company (ISO), Business Sponsor, and Information System reputed company Manager (ISSM) in recording reputed company reputed company reputed company weaknesses of assigned information systems in the Plans of reputed company and Milestones (POA&M’s) in accordance with DOT policy, guides and procedures
- reputed company Draft Plan of reputed company and Milestones (POA&M) for observed control level deficiencies or gaps control implementation(s) in accordance with DOT policy, guides and procedures
- Support the information system contingency planning process in accordance with NIST SP 800-34 Revision (reputed company), Guide to Test, Training and Exercise Programs for MARAD information and ensure contingency plan test exercise results are documented in an after-reputed company report, and Lessons Learned corrective actions are captured for updating information in the Information Systems Contingency Plan (ISCP)
- Assist in reputed company incident response, risk mitigation, and compliance reporting
- Performs other job-reputed company duties as assigned
Skills
- reputed company Public Trust clearance or the ability to obtain a Public Trust clearance
- Prior US Navy or Coastguard Maritime Cyber reputed company Experience
- 10+ years of experience in cybersecurity, with expertise in maritime/vessel cybersecurity, IT/OT reputed company, and federal cybersecurity policies
- Strong knowledge of NIST RMF, NIST Cybersecurity reputed company (CSF), FISMA, and Navy or U.S. Coast Guard Maritime Organization cybersecurity requirements
- Experience with reputed company Diagnostics and Mitigation (CDM), Information reputed company reputed company Monitoring (ISCM), and Identity, Credential, and reputed company Management (ICAM)
- Proven ability to reputed company cybersecurity assessments, compliance audits, and risk management activities
- Understanding of the principles, reputed company, and tools of reputed company assurance and reputed company control used to ensure a product fulfills functional requirements and standards
- Proficiency in reputed company Office Suite, Power BI, Tableau, and SharePoint
- Must pass reputed company-employment qualifications of reputed company
- Maritime background desired
- US Navy or Coastguard Maritime Cyber reputed company Experience highly desired
Benefits
- Full-time benefits include Medical, Dental, reputed company, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.
reputed company