Senior Cyber Information Systems Analyst – RMF & Assessments

QBE Federal; Virginia (IL); Hybrid; USD 115,000 - 130,000; Full time

Benefits offered by this job

Health Insurance

Paid Time Off

Holiday Pay

Disability Insurance

Retirement Plan

Learning & Development

Job summary

QBE, LLC seeks a Cyber Information Systems Analyst - SME - Assessment Function to provide independent security control assessment expertise supporting NIH/OD-OIT. The position is primarily remote but requires some TDY, with responsibilities spanning planning, testing, and reporting on security controls for federal systems.

Minimum qualifications include a 10+ year track record in security assessments, RMF expertise, and certifications (CompTIA Security+, GISP).

Qualifications

• Associate degree in cybersecurity, IT, CS, information systems, business, communications, or related field, or equivalent experience.
• At least 10 years of relevant experience.
• Extensive experience conducting independent security control assessments.
• Expert knowledge of federal RMF and security control assessment practices.
• Experience developing Security Assessment Plans and Security Assessment Reports.
• Strong technical testing, risk analysis, and documentation skills.
• CompTIA Security+ certification.
• GISP certification.
• Ability to obtain/maintain the required federal background investigation or security clearance.

Responsibilities

• Plan and conduct independent security control assessments.
• Develop Security Assessment Plans and test procedures.
• Review security documentation and supporting control evidence.
• Interview system personnel and evaluate control implementation.
• Perform technical and procedural testing of applicable controls.
• Document assessment findings and supporting evidence.
• Develop Security Assessment Reports and risk statements.
• Maintain organizational independence between assessment and system implementation functions.
• Evaluate remediation evidence for identified deficiencies.
• Coordinate assessment schedules and activities with system stakeholders.

Job description

QBE, LLC seeks a Cyber Information Systems Analyst - SME - Assessment Function to provide independent security control assessment expertise supporting NIH/OD-OIT. The position is primarily remote but requires some TDY, with responsibilities spanning planning, testing, and reporting on security controls for federal systems.

Minimum qualifications include a 10+ year track record in security assessments, RMF expertise, and certifications (CompTIA Security+, GISP).