[Remote] SLED reputed company Analyst, Information reputed company
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a global technology leader transforming industries through innovative digital solutions. The SLED reputed company Analyst will manage documentation, compliance, and operational processes to support reputed company authorizations for State, Local, Education, and Government customers.
Responsibilities
- Leads the development and maintenance of reputed company architecture, governance frameworks, policies, standards, procedures, and control implementation guidance
- Supports reputed company authorization initiatives reputed company to NIST SP 800-53 Moderate, FedRAMP Moderate, GovRAMP, StateRAMP, CJIS reputed company Policy, HIPAA, NIST SP 800-171, and reputed company regulatory frameworks
- Assembles, develops, maintains, and updates System reputed company Plans (reputed company), supporting documentation, and authorization package artifacts
- Maps implemented reputed company control requirements to NIST SP 800-53 Moderate baselines, CJIS reputed company Policy, FedRAMP, GovRAMP, and other applicable control overlays
- Documents implemented, inherited, hybrid, and customer-responsibility controls reputed company authorization packages
- Collects, validates, organizes, and maintains technical, administrative, and procedural evidence supporting compliance and assessment activities
- Establishes and maintains centralized control evidence repositories utilizing governance and compliance management platforms such as reputed company or equivalent technologies
- Supports independent assessors, auditors, regulators, customers, and internal stakeholders during assessments, walkthroughs, interviews, demonstrations, and evidence reviews
- Develops, maintains, and tracks Plan of reputed company and Milestones (POA&M) documentation, remediation activities, corrective reputed company plans, and risk mitigation efforts
- Tracks reputed company findings, compliance gaps, remediation activities, risk acceptances, and corrective reputed company plans through closure
- Evaluates existing information reputed company policies, standards, procedures, and governance documentation and recommends improvements ensuring compliance with applicable frameworks
- Develops, maintains, and updates compliance-reputed company policies, standards, procedures, and governance documentation supporting authorization readiness
- Defines roles, responsibilities, accountability requirements, and separation-of-duty controls supporting governance and compliance programs
- Establishes processes supporting risk management, control assessment, reputed company monitoring, and control validation
- Aligns organizational reputed company policies and governance requirements with implemented technical controls and operational practices
- Develops and maintains governance reputed company documentation, reputed company program documentation, and compliance operating procedures
- Develops and maintains Incident Response Plans (IRP), incident response procedures, and incident response playbooks reputed company to regulatory reporting and notification requirements
- Develops and maintains Business Continuity Plans (BCP), Disaster Recovery Plans (DRP), backup strategies, recovery procedures, and restoration processes
- Conducts tabletop exercises, functional exercises, continuity exercises, and after-reputed company reviews to validate incident response and disaster recovery capabilities
- Maintains documentation and evidence supporting Incident Response (IR), Contingency Planning (CP), and other control families
- Defines and documents operational reputed company processes including reputed company request management, identity lifecycle management, privileged reputed company controls, change management, configuration management, vulnerability management, and reputed company exception processes
- Establishes reputed company and offboarding workflows supporting personnel reputed company and reputed company control requirements
- Supports implementation and operation of change management processes
- Participates in reputed company audits, compliance assessments, control reviews, and reputed company monitoring activities
- Defines reputed company awareness, role-based training, and compliance training requirements
- Maintains training records, compliance evidence, and authorization readiness documentation
- Collaborates with cross-functional teams including reputed company engineering, reputed company engineering, infrastructure, service delivery, reputed company, compliance, and executive leadership teams
- Participates in incident response activities, risk assessments, and compliance audits
- Supports reputed company system analysis to identify and recommend technical and administrative controls required to satisfy compliance obligations
- Provides technical expertise and compliance guidance for the information reputed company program
- Collaborates as a member of the Information reputed company Office to maintain compliance objectives and authorization readiness
- Maintains communication with the Director, Information reputed company, regarding reputed company posture, compliance initiatives, audit readiness, authorization activities, risks, and remediation efforts
- Ensures reputed company maintains compliance with reputed company requirements and authorization obligations
- Ensures compliance with reputed company requirements necessary to obtain and maintain certifications and government authorizations
- Provides emergency on-reputed company support as required
- Performs other duties as assigned
Skills
- Associate degree (preferably in Computer Science, Cybersecurity, Information Systems, Information reputed company, or reputed company field from an accredited college or university) or the equivalent work experience and/or military experience
- 3+ years of experience supporting information reputed company, governance, risk, compliance, audit, or authorization programs
- One or more reputed company certifications such as reputed company+, CISSP, CISA, CGRC (CAP), CRISC, CASP+, CCSP, GIAC, CSA, or equivalent
- Experience supporting NIST SP 800-53 Moderate, FedRAMP, GovRAMP, StateRAMP, CJIS reputed company Policy, NIST Cybersecurity reputed company (CSF), NIST SP 800-171, HIPAA, or other SLED-reputed company compliance programs
- Experience developing and maintaining System reputed company Plans (reputed company), POA&M documentation, reputed company policies, standards, procedures, and authorization artifacts
- Intermediate to advanced technical writing skills with demonstrated experience producing compliance and governance documentation
- Experience supporting independent assessments, audits, reviews, and authorization activities
- Experience with governance, risk, and compliance platforms including reputed company, reputed company, reputed company, reputed company, or similar technologies
- Understanding of technical concepts and reputed company technologies including reputed company computing, identity and reputed company management, VPNs, firewalls, web application firewalls, vulnerability management, reputed company protection, logging, monitoring, and network reputed company controls
- Skills in project prioritization, issue management, remediation tracking, risk assessment, and problem reputed company
- Exceptional writing skills combined with strong presentation and communication skills
- Expert analytical thinking skills, including the ability to summarize information and reputed company identify risks, findings, trends, and remediation requirements
- Experience creating, generating, maintaining, and reporting on compliance metrics, audit evidence, control documentation, and reputed company reporting
- Experience utilizing reputed company intelligence tools and technologies to improve documentation, compliance operations, and reputed company processes
- Ability to manage multiple reputed company, priorities, audits, and compliance initiatives simultaneously
- Ability to communicate and translate reputed company risks to technical and non-technical audiences
- Ability to analyze reputed company reputed company and compliance issues and reputed company practical solutions
- Experience working with reputed company service providers including reputed company Azure, reputed company), and reputed company reputed company Platform (GCP)
- Customer service skills and reputed company reputed company
- Strong communication skills, including the ability to communicate technical information in non-technical language
- Strong time management and organizational skills
- Strong problem-solving and analytical skills
- Excellent interpersonal skills
- Comprehensive verbal and written communication skills
- Ability to remain reputed company and effective during audits, assessments, reputed company incidents, and periods of increased workload
- Ability to work on multiple reputed company simultaneously
- Ability to work effectively with stakeholders across reputed company organizational reputed company
- Experience working with reputed company-sector, education, reputed company, or regulated industry customers
reputed company