CyberSecurity Analyst with Security Clearance

Pro2Serve

Oak Ridge, Tennessee, 37830

$102,102 per year - estimated ?

NEW

Position: Cybersecurity Analyst Division: Environmental Duration: Direct Hire Location: Knoxville, TN Company Description: Professional Project Services Inc. has upcoming opportunity for a Cybersecurity Analyst (Direct Hire) position at our office in Knoxville, TN. Please submit resumes via the web page link below. Professional Project Services, Inc. (Pro2Serve®) is a nationally-recognized technical and engineering services firm dedicated to providing critical infrastructure engineering services in support of our Nation’s security. Using a disciplined systems engineering approach that is supported by an innovative software toolset, Pro2Serve provides solutions to improve the effectiveness and efficiency of our government and private clients. We support the defense, energy, and science markets through responsive, cost-effective execution of critical security, facilities and infrastructure, nuclear defense and nonproliferation, and environmental projects. Job Description The Cybersecurity GRC Analyst will use their experience to provide subject matter expertise in cybersecurity policies, standards, regulatory requirements, frameworks, best practices and compliance management to the organization. The Analyst will assess, document, and implement various information security controls for the company and its clients. The Analyst is responsible for managing processes for third party vendor assessment, systems assessment support, and has familiarity with risk assessments, DoD and DOE infosec regulations, and NIST 800-53 / 800-171 controls. Other Duties and Responsibilities include: • Lead compliance projects within established deadlines. • Review, validate, improve, update security controls and work with control owners to drive improvements to documentation and System Security Plans. • Maintain awareness of changes or updates to security control frameworks, compliance laws and statutes, and identify the impact to the organization and its security posture. • Manage the documentation and development of policies, guidance, and procedures related to information security for the company and its clients. • Respond to data calls, lead implementation of Binding Operational Directives and Executive Orders, and other requirements from government clients. • Lead internal assessments and ensure the established controls are being followed. • Identify findings and assist in driving risk items to closure. • Review 3rd party documentation to determine information security risk, and communicate those risks to stakeholders. • Assist in enhancing existing risk metrics and report high impact items to key stakeholders. • Drive timely and transparent communication and report progress on key deliverables, priorities, goals, and issues across the team and stakeholders. Job Requirements • Bachelor's Degree or at least 15 years’ experience with networking, information technology, software, and operating systems • Proven experience with systems installation, management, and support • Proven ability to troubleshoot hardware and software • Excellent writing and verbal communication skills, interpersonal and presentation skills, and the proven ability to influence and communicate effectively with all levels of staff. • Strong organizational and project management skills. • Ability to understand how the business functions and how to balance cybersecurity standards and compliance needs with organizational goals. • Strong organizational skills with the ability to lead multiple compliance-related projects and initiatives. • Considerable knowledge of cybersecurity policies, standards, procedures, frameworks and best practices. • Familiarity with risk assessments, common control sets, and regulatory requirements: Risk Management Framework (RMF), Cyber Security Framework (CSF), NIST 800-53, Cybersecurity Maturity Model Certification (CMMC), NIST 800-171. Duration: