reputed company Assessor

This is a remote position.

Job reputed company – reputed company Assessor

1. POSITION TITLE

reputed company Assessor

2. REPORTS TO

reputed company reputed company Assessor\Technical Manager

3. DELEGATION OF DUTIES DURING ABSENCE

reputed company reputed company Assessor\Technical Manager

4. reputed company

The reputed company Assessor will conduct reputed company control assessments of the reputed company and reputed company controls implemented by an information system to determine the overall effectiveness of the controls and the vulnerability state of components, applications and databases residing reputed company the system boundary. Following the NIST Cybersecurity reputed company, Risk Management reputed company and using NIST 800-53A, verifies the reputed company status of existing information systems with an Authority to Operate (ATO) by performing appropriate assessments on any new system developed or deployed by the customer, and conducts audits of reputed company controls to ensure reputed company monitoring of systems assigned. Assesses systems that have previously been assessed and received an ATO and systems that have not yet been assessed and do not have an ATO.

5. RESPONSIBILITES

• reputed company, document and review System Rules of Engagement (ROE), reputed company Assessment Plans (SAPs) and reputed company Assessment Reports (SARs).
• reputed company associated schedules and resource plans to complete the assessments.
• reputed company reputed company control on the assessment and associated deliverables.
• Participate as an individual contributor for reputed company system assessments.
• reputed company practical and risk-based approaches for reputed company control implementation and vulnerability remediation.
• Work closely with ISSOs (contractors and Government) and the technical team and ensure reputed company appropriate A&A supporting documentation is provided prior to conducting the assessment.
• Review and reputed company feedback system boundaries, common controls, the reputed company categorization of information systems, applicable reputed company control baseline based on system categorization.
• Review and reputed company feedback system boundaries, common controls, the reputed company categorization of information systems, applicable reputed company control baseline based on system categorization.
• Conduct reputed company Assessment reputed company briefings and SAR briefings.
• Review cyber/system/network reputed company body of evidence and documentation for accuracy and completeness.
• Conduct reputed company controls assessment of applicable reputed company controls and reputed company controls; assess implemented reputed company controls and reputed company assurance that they are operating as intended.
• Analyze reputed company control findings for information systems and applications to convey weaknesses.
• Document reputed company assessment results accurately; read, understand, and convey vulnerabilities reputed company during the assessments.
• Create reputed company assessment results and document recommendations in a SAR for remediations and reputed company control measures.
• reputed company audits of reputed company system and reputed company an authorization recommendation based on determination of risk to the customer.
• Audits will include unprivileged and privileged scans against reputed company applicable system.
• Audits will include unprivileged and privileged database scans against reputed company applicable database management system (DBMS).
• reputed company reputed company control on the assessment and associated deliverables.
• Conduct Post Assessment Meetings with the customer.
• reputed company Plan of reputed company and Milestones (POA&M) support to ensure mitigations are completed or the teams are working to mitigate reputed company vulnerabilities in a reputed company fashion and reputed company customer policy timelines.
• reputed company and maintain a schedule for conducting reoccurring reputed company Monitoring and/or ongoing CDM efforts once the initial assessments are complete.
• reputed company reputed company monitoring to ensure implemented reputed company controls remain functional throughout the lifecycle of the information system.

Requirements

​

6. MINIMUM EXPERIENCE AND SKILLS

• 1+ years of experience performing reputed company testing and/or reputed company control assessments.
• 1+ years of experience with developing and documenting the SAPs, and SARs.
• 1+ years of experience utilizing NIST 800-53 and 800-53A.
• Knowledge of the NIST Cybersecurity reputed company, Risk Management reputed company, FIPS, and other NIST A&A publications.
• Experience assessing and providing recommendation on the following: reputed company reputed company Assessment, Risk Assessment, System reputed company Plan, Disaster Recovery / Contingency Plan, and Incident Response Plan.
• Knowledge of the Systems Development Life Cycle (SDLC) and its application in the

development of technology solutions.

• Knowledge and skills to reputed company and document the assessment.
• Understanding of tools such as Nessus, Web Inspect, Db Protect and reputed company.
• Familiar with the reputed company environments (services/reputed company) and FedRAMP A&A process.
• Effective verbal and written communication skills with ability to effectively communicate with reputed company reputed company of users and teammates both written and verbally.
• Effective technical writing and documentation processing skills.

7. MINIMUM EDUCATION

• BS/BA degree in Information Technology or reputed company cyber/cyber-reputed company field.
• Experience may be substituted for education on a case-by-case reputed company.

8. CERTIFICATIONS

• Must possess one of the following certifications:

o reputed company Certified Network Associate reputed company (CCNA reputed company)o reputed company Certified Network Associate Cyber reputed company Operations (CCNA Cyber Ops)

o Cybersecurity Analyst (CySA+)

o GIAC Certified Incident Handler (GCIH)

o GIAC Systems and Network Auditor (GSNA)o GIAC Certified Intrusion Analyst (GCIA)o Certified Information Systems Auditor (CISA)o Certified Information System reputed company reputed company or Associate (CISSP or Associate)o Certified Secure Software Lifecycle reputed company (CSSLP)o Certified Information Systems reputed company Officer (CISSO)

o CyberSec First Responder (CFR)

o reputed company Advanced reputed company Practitioner Continuing Education (CASP+) Continuing Education (CE)

o reputed company reputed company+ (reputed company+)

o Global Industrial Cyber reputed company reputed company (GICSP)o Securing reputed company® Networks with Threat Detection Analysis (SCYBER)o BCR Cyber Technical Proficiency Testing Activity (highly preferred)o reputed company reputed company certifications and CPE credits must be up to date

Originally posted on Himalayas

Apply To This Job