Information Security Analyst

Integrated Resources, Inc ( IRI ); United States; On-site; USD 83,000 - 94,000; Full time

Job summary

Integrated Resources, Inc. is seeking a Security Assessment Specialist for an 18-month (possible extension) contract. Occasional travel and two openings.

The role focuses on security control assessments, evidence review, and risk-based remediation guidance. Strong DevSecOps automation and AI assessment experience are highly valued. The candidate will review controls, policies, and documentation, analyze results, and collaborate with stakeholders to ensure SAFR compliance and continuous

Qualifications

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field.
• 3–5+ years of relevant information security experience.
• Proven hands-on experience conducting security assessments and control evaluations.
• Strong knowledge of NIST SP 800-37, NIST SP 800-53, and/or NIST SP 800-53A.
• Experience with security compliance, risk management, governance, and continuous authorization.
• Experience reviewing security evidence/data and advising stakeholders on requirements.
• Strong understanding of security controls, policies, procedures, risk assessment, and remediation.
• Excellent communication, collaboration, negotiation, and stakeholder-management skills.
• Strong analytical and problem-solving abilities with attention to detail.

Responsibilities

• Conduct security control assessments to identify risks, vulnerabilities, and compliance gaps.
• Review and evaluate security controls, policies, procedures, and supporting documentation.
• Analyze assessment results and prioritize risks based on business needs.
• Provide recommendations on SAFR requirements, best practices, and remediation activities.
• Review data and security evidence to support decisions.
• Assist with implementing new security processes with existing workflows.
• Collaborate with cross-functional teams to address findings and improve security posture.
• Maintain documentation throughout the assessment and compliance lifecycle.

Skills

Security assessment

NIST knowledge

Risk analysis

Documentation

Education

Bachelor's degree in CS/InfoSec or related field

Tools

SAFR

Job description

Duration: 18 Months | Possible for Extension

Travel: Occasional travel, including overnight stays, may be required

TWO OPENINGS

PAYRATE RANGE: $60-68 PER HOUR ON W2

Rate Flexibility:The manager is willing to review candidates above the target rate, particularly when they bring strong DevSecOps automation and/or AI assessment experience.

Experience Required:

• Security control assessment experience
• NIST 800-37 / 800-53 / 800-53A
• IT/Cloud security assessment experience
• Evidence review and control scoring
• Risk analysis and reporting

Preferred:

• AI security assessments
• Automated evidence collection
• Security assessment automation
• Data analytics for enterprise risk

Key Responsibilities

• Conduct comprehensive security control assessments to identify risks, vulnerabilities, weaknesses, and compliance gaps.
• Review and evaluate security controls, policies, procedures, and supporting documentation.
• Analyze assessment results and prioritize risks based on business and information security requirements.
• Provide recommendations and guidance to stakeholders on SAFR requirements, security best practices, and remediation activities.
• Review data and security evidence to support assessment and compliance decisions.
• Assist with implementing and integrating new security processes with existing organizational processes.
• Participate in projects involving new security processes, controls, and compliance initiatives.
• Develop and communicate security-related process changes to impacted stakeholders.
• Support risk management and continuous authorization activities.
• Collaborate with cross-functional teams to address security findings and improve the organization's overall security posture.
• Maintain strong documentation and attention to detail throughout the assessment and compliance lifecycle.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent experience.
• 3–5+ years of relevant information security experience.
• Proven hands‑on experience conducting security assessments and control evaluations.
• Strong knowledge of NIST SP 800-37, NIST SP 800-53, and/or NIST SP 800-53A.
• Experience with security compliance, risk management, governance, and continuous authorization.
• Experience reviewing security evidence/data and advising stakeholders on security requirements and best practices.
• Strong understanding of security controls, policies, procedures, risk assessment, and remediation.
• Excellent communication, collaboration, negotiation, and stakeholder‑management skills.
• Strong analytical and problem‑solving abilities with exceptional attention to detail.

Preferred Qualifications

• CISSP, CISA, or CISM certification.
• Experience working in a policy, security assurance, regulatory, financial, or quasi‑governmental environment.
• Familiarity with cloud security and cloud service providers.
• Knowledge of SAFR lifecycle compliance and testing.
• Experience with security governance, risk, and compliance (GRC) processes.