Compliance & Security Analyst

Architects and authors System Security Plans (SSPs), develops and manages the Plan of Action and Milestones (POAM), and drafts formal security policies. Designs and facilitates annual Incident Response (IR) and Disaster Recovery (DR) tabletop drills, leads the Evidence Collection phase, and maintains a working knowledge of applicable Federal, State, and Local laws and regulations.

Requirements

• Bachelor's degree in a related field
• Equivalent combination accepted
• Compliance Enclaves experience
• FIPS 140-2/3 Validation experience
• Network Architecture experience
• Log Logic experience
• Framework Expert experience
• Technical Writing experience
• Knowledge of SOC2, ISO 27001, HIPAA, or GDPR
• CCP (CMMC Certified Professional) certification
• CISA certification
• Security + certification
• Ability to work with C-Suite Executives and across client technical teams
• Portfolio Management experience
• Ability to manage through high level of ambiguity and multiple requests
• Ability to work on multiple projects simultaneously
• Outstanding technical/business communication skills