Information Systems Architect VII

Pyramid Consulting; Raleigh (NC); On-site; USD 75,000 - 100,000; Full time

Job summary

A leading consulting firm is seeking a Governance Risk and Compliance professional in Raleigh, NC. The role involves implementing security controls, risk assessments, and preparing security documentation. Candidates should have 5-7 years of experience in security or risk management and must pass US Government Clearance processes. Strong communication skills and a relevant degree are necessary. This position offers a chance to operate within a trusted advisory capacity to enhance client security environments.

Qualifications

• 5-7 years of experience in risk management, audit, or security roles.
• Must pass US Government Clearance processes - Secret Level or Public Trust.
• Knowledge of RMF and NIST compliance regulations.

Responsibilities

• Implement operational security measures with clients.
• Assess and mitigate system security risks.
• Prepare security authorization packages in compliance with client requirements.

Skills

Risk management

Security control implementation

Effective communication

Problem-solving

Education

Bachelor's or Master's in Computer Science or Information Security

Job description

The position is responsible for completing Governance Risk and Compliance (GRC) functions that entails security control implementation, continuous monitoring, and federal Assessment and Authorization (A&A) activities within the US Government Client.

The following are the primary responsibilities:

• Works closely with client to ensure operational security measures are implemented.
• Assesses and mitigates system security risks; determines and analyzes security requirements for implementation and testing.
• Reviews and continuously monitors implemented security controls.
• Creates and maintains security checklists, templates and other tools to aid in the A&A process.
• Performs security control assessment using NIST 800-53A guidance and as per continuous monitoring requirements.
• Performs risk analyses to determine and recommends essential safeguards.
• Proactively mitigates system vulnerabilities and recommends compensating controls.
• Prepares security authorization packages in accordance with the client contractual requirements.
• Develops core documents such as System Security Plan, Contingency Plan, Incident Response Plan, Standard Operating Procedures, Plan of Actions and Milestones, Remediation Plans, Configuration Management Plan, etc.
• Maintains client-specific Plan of Action and Milestones and supports remediation activities.
• Maintains an inventory of hardware and software for the information system.
• Develops, tests and trains on Contingency and Incident Response planning.
• Conducts independent scans of application, network and database and utilizes Managed Security Services Vulnerability Assessment Team (VAT) support as applicable.

The ISSO operates as a trusted advisor in the organization, working with client management and focusing specifically on the security environment in relation to client business objectives. The ISSO helps to understand operational issues and plans the next steps in collaboration with Account ASOs from an information security viewpoint. The position will be able to demonstrate industry expertise and understanding of security governance and compliance. This position requires the ability to interact and influence at an organizational level to carry out governance, risk and compliance activities.

Qualifications:

• Must be able to pass US Government Clearance processes - Secret Level or Public Trust.
• 5-7 years’ experience working in a risk management, audit, security or technical delivery role.
• Bachelor or master degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience).
• Knowledge of the security countermeasures and overall RMF and NIST compliance regulations.
• Excellent and effective communication skills.
• Ability to work effectively in diverse, multi-national and virtual environments.
• Self-motivated and tenacious.
• Demonstrate sound judgment and integrity.

Preferred Skills:

• Experience in overall Security Risk and Compliance initiatives.
• CISSP, CISM/CISA or CRISC a plus.
• Fluent in English.

All your information will be kept confidential according to EEO guidelines.