Senior Information Security Analyst – Risk & Compliance Lead

NextGen Federal Systems; Washington (District of Columbia); On-site; USD 100,000 - 140,000; Full time

Job summary

NextGen Federal Systems is seeking an Information Security Analyst to join our DHS support team in Washington, DC. You will report to the ISSM and provide security and compliance duties to assigned systems stakeholders.

Key responsibilities include tracking POAMs, reviewing TRM, leading ATO efforts, ensuring policy adherence, auditing logs, and developing SSP/RA/PTA/PIA/ST&E/POA&M artifacts. A strong background in NIST controls and DHS/CBP requirements is essential.

Qualifications

• Significant ISSO experience required, in lieu of degree (2 years).
• 7+ years of experience in security/IS
• Developing SSP, RA, PTA, PIA, ST&E, POA&M
• Review and track POAMs and SOPs
• Understanding of NIST 800-series controls
• Proficiency with Microsoft Office products (Word/Excel/PowerPoint/Outlook) and SharePoint

Responsibilities

• Track and manage POAMs through remediation cycle from creation to closure.
• Review and approve TRM for software products.
• Lead Authority to Operate efforts for assigned systems.
• Ensure policy and procedures meet DHS/CBP compliance.
• Review audit logs as per departmental policy.
• Develop SSP, RA, PTA, PIA, ST&E and POA&M artifacts.
• Document risks and controls for risk-based decisions.
• Categorize CIAs using FIPS 199 and NIST SP 800-60.
• Create SOPs for processes and quality improvements.
• Develop continuous monitoring to maintain security controls.

Skills

ISSO experience

POAM management

NIST SP 800-60

Security compliance

Education

ISSO experience required (2 years)

Tools

Word

Excel

PowerPoint

Outlook

SharePoint

Job description

NextGen Federal Systems is seeking an Information Security Analyst to join our DHS support team in Washington, DC. You will report to the ISSM and provide security and compliance duties to assigned systems stakeholders.

Key responsibilities include tracking POAMs, reviewing TRM, leading ATO efforts, ensuring policy adherence, auditing logs, and developing SSP/RA/PTA/PIA/ST&E/POA&M artifacts. A strong background in NIST controls and DHS/CBP requirements is essential.