Senior Cybersecurity Information Analyst (ISSM)

Sacramento Native American Health Center, Inc; Clearfield (UT); Hybrid; USD 100,000 - 125,000; Full time

Job summary

Sacramento Native American Health Center, Inc in Utah seeks a Senior Cyber Security Analyst III (ISSM) for a hybrid role supporting DoD programs and government customers. The position focuses on engineering secure solutions and ensuring compliance across teams.

Applicants must have an active DoD SECRET clearance, seven+ years in information security or IT audit, and experience with Risk Management Framework and NIST controls. Located in Clearfield, UT with on-site and hybrid elements.

Qualifications

• Minimum seven (7) years of experience in an Information Security position or IT Audit role.
• Experience with DoD programs and risk management.
• Active DoD SECRET clearance (ability to gain Top Secret).
• BS/BA degree or equivalent.

Responsibilities

• Lead teams of cybersecurity engineers and analysts in developing solutions across multiple DoD programs.
• Coordinate with Risk Management Framework team to ensure design meets requirements and assist Government during certification.
• Assist with FISMA compliance audits and provide status updates to the PM.

Skills

Security risk assessments

Team leadership

DoD program experience

NIST 800-53

Communication skills

Documentation

Education

BS/BA degree

Job description

• Base Pay $100,000.00 - $125,000.00 / Year
• Employee Type FT Exempt
• Required Degree 4 Year Degree

SENIOR CYBER SECURITY ANALYST III (ISSM)

This is a HYBRID position, not fully remote.

Only apply if you have a current security clearance.

CONTRACTED FEDERAL DRUG-FREE WORKPLACE

Location: Clearfield, UT

The Cybersecurity Analyst is a key member of the Cybersecurity team and works closely with our customers across functional teams to provide compliance assessments and help engineer secure solutions as they are being developed.

Essential Duties and Job Functions

• Assist customers design, engineer, and implement technical solutions
• Lead teams of cybersecurity engineers and analysts in developing solutions across multiple DoD programs
• Coordinate with Risk Management Framework team to ensure design meets specified requirements
• Coordinate with DoD agencies to ensure solutions meet specific security guidelines
• Conduct research, review documentation and provide input for Risk Management Framework packages to the Government for review and approval
• Review Risk Management Framework documentation for completeness and readiness for certification analysis
• Coordinate with the program team to gather artifacts and assist the Government in resolving issues precluding the program from receiving an Authority To Operate
• Assist with FISMA compliance audits and provide status updates to the PM
• Perform regular STIG and vulnerability analysis in compliance with DoD guidelines
• Review compliance with current Cybersecurity policy, regulations, and directives to ensure secure configuration and operation of all operated and maintained IT assets, recommending corrective actions as required
• Assist customers developing new system to design and engineer the systems to meet current cyber security requirements and best practices

Knowledge, Experience and Skills

• Minimum seven (7) years of experience in an Information Security position or IT Audit role with a background in performing security risk assessments
• Experience with system design across multiple areas of operations (AAA, Operating Systems, network layout and design…)
• Requirements gap analysis/traceability
• Proven ability to create and maintain effective documentation, including policies, processes and procedures
• Experience drawing Topology, Data Flow, and Boundary diagrams
• Strong understanding of security concepts and detailed implementation including using NIST 800-53r4 controls as a framework
• Deep understanding of how to tailor security implementation based on mission and threats
• Knowledge of security and IT general controls for application development and management
• Good communications skills, both verbal and written, as well as the ability to communicate well with people in a variety of positions, roles and levels
• Professional, self-motivated and a strong sense of urgency.
• Ability to provide technical direction to more junior team members

Required

• Active DoD SECRET clearance (ability to gain Top Secret)

Preferred

• BS/BA degree or an equivalent combination of education and experience
• Training in Risk Management or IT Audit Methodology strongly desired

Requirements

Please provide two past work references on resume.