Senior Cybersecurity Analyst - Cloud & FedRAMP Expert

Acentra Health, LLC; United States; On-site; USD 99,000 - 136,000; Full time

Job summary

The Senior Cybersecurity Analyst at Acentra Health will join a collaborative team to track and brief the security status of cloud service provider systems, write and review security documentation, and coordinate with Engineers and System Administrators on security guidelines.

Responsibilities include implementing Authority to Operate (ATO) for systems to meet FedRAMP High and HIPAA, applying NIST 800-53 controls, and preparing deliverables for contract requirements.

Qualifications

• Bachelor's degree or higher in an information technology-related field.
• Active security certification (CISSP/CISM/CISA/CompTIA Security+/CAP/GSEC).
• Minimum of 10 years applying information technology security controls.
• Minimum of 2 years using federal processes and standards (NIST, FIPS, FISMA, DHS 4300A).
• Experience with Federal Security Policy Documentation (POA&Ms, SOPs, SSPs).
• Ability to provide system-related input for SOWs and procurement documents.
• Developing system designs to enhance cyber security controls and reduce vulnerabilities.

Responsibilities

• Establish and implement Authority to Operate (ATO) for systems to align with FedRAMP High and HIPAA.
• Apply NIST 800-53 controls to security plans and programs.
• Serve as liaison between program managers and senior leaders with technical deliverables.
• Update security documentation: system security, incident response, contingency plans.
• Prepare contractual deliverables for the customer.
• Assist SIEM investigations and coordinate customer notifications per contract obligations.

Skills

FedRAMP High

HIPAA compliance

NIST 800-53

Security controls implementation

US citizenship

Public trust clearance

Contract management

Education

Bachelor's degree or higher in information technology-related field

Job description

The Senior Cybersecurity Analyst at Acentra Health will join a collaborative team to track and brief the security status of cloud service provider systems, write and review security documentation, and coordinate with Engineers and System Administrators on security guidelines.

Responsibilities include implementing Authority to Operate (ATO) for systems to meet FedRAMP High and HIPAA, applying NIST 800-53 controls, and preparing deliverables for contract requirements.