Cyber Security Analyst

JPS Tech Solutions Pvt Ltd; Virginia; On-site; USD 110,000 - 150,000; Full time

Job summary

The Office of Information Services (OIS) within the Maine Department of the Secretary of State seeks a Senior Cyber Security Analyst to strengthen the information security program and implement NIST CSF 2.0 for moderate impact systems. You will lead security controls, document status, risks, and gaps, and collaborate with senior IT leadership to prepare for third-party assessments.

The ideal candidate has deep hands-on security expertise, strong documentation skills, and the ability to work

Qualifications

• Bachelor’s degree in IT or cybersecurity or equivalent experience.
• 10+ years in information security with senior/lead responsibilities.
• Hands-on risk management, security assessments, architecture, and incident response.
• Solid understanding of enterprise IT and security operations.
• Deep knowledge of NIST CSF or RMF.
• Excellent written and verbal security documentation skills.
• Certifications such as CISSP, CISM, or CISA preferred.
• Experience with government/public-sector environments.
• Familiarity with third-party audits and compliance assessments.

Responsibilities

• Lead and support the implementation of NIST CSF 2.0 across enterprise systems and apps.
• Assess security controls, document status, risks, and gaps.
• Develop and maintain SSP, BIA, contingency plans, and governance artifacts.
• Create and manage POA&M for remediation and risk mitigation.
• Collaborate with CIO, security team, system owners, and stakeholders.
• Provide SME in risk assessment, security controls, SIEM, and XDR.
• Support audit readiness for independent security assessments.
• Mentor junior team members and promote security best practices.

Skills

Risk management

Security assessments

Incident response

Security architecture

NIST CSF/RMF

Documentation

SIEM

XDR

Communication

Education

Bachelor’s degree in Information Technology, Cybersecurity, or related field

Tools

SIEM

XDR

Job description

The Office of Information Services (OIS) supports the Maine Department of the Secretary of State (SoS) by managing secure, reliable technology services for citizens and businesses across the State of Maine. We are seeking a Senior Cyber Security Analyst to strengthen our information security program and support the implementation of the NIST Cybersecurity Framework (CSF) 2.0 for Moderate impact information systems.

This role works closely with the OIS Information Security Officer and senior IT leadership to assess, document, implement, and monitor security controls, while preparing systems and applications for independent third-party security assessments. The ideal candidate brings deep hands-on security expertise, strong documentation skills, and the ability to collaborate effectively across technical and business teams.

Key Responsibilities

• Lead and support the implementation of NIST CSF 2.0 across enterprise systems and applications.
• Assess security controls and document implementation status, risks, and gaps.
• Develop and maintain core security documentation, including System Security Plans (SSP), Business Impact Analyses (BIA), Contingency Plans, Change Management Plans, and related governance artifacts.
• Create and manage Plans of Action and Milestones (POA&M) to track remediation efforts and risk mitigation activities.
• Collaborate with the CIO, Information Security team, system owners, and stakeholders to ensure security controls are properly implemented and monitored.
• Provide subject matter expertise in risk assessment, technical security controls, SIEM, and XDR solutions.
• Support audit readiness and preparation for independent security assessments.
• Mentor junior team members and promote security best practices across the organization.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field (or equivalent experience).
• 10+ years of experience in information security, including senior or lead-level responsibilities.
• Strong hands-on experience in risk management, security assessments, security architecture, and incident response.
• Solid understanding of enterprise IT infrastructure and security operations.
• In-depth knowledge of NIST Cybersecurity Framework (CSF) and/or NIST Risk Management Framework (RMF).
• Excellent written and verbal communication skills, with the ability to produce high-quality security documentation.
• Preferred Qualifications
• Industry certifications such as CISSP, CISM, or CISA
• Experience supporting government or public-sector environments
• Familiarity with third-party audits and compliance assessments