Senior News Analyst

SAIC; Clifton (TX); Remote; USD 120,000 - 150,000; Full time

Job summary

SAIC is seeking a remote Senior Cyber GRC Analyst to join our Security Operations Services team for a major state & local government customer in Texas. The role focuses on cyber risk management, vulnerability analysis, and the implementation of RMF-aligned controls across data center and cloud environments.

You will coordinate system security plans, risk assessments, and periodic audits, producing senior-management briefings and reports.

Qualifications

• Bachelor's degree in a related field with 5+ years in information security.
• 3–5 years of cyber risk management experience with RMF and SP 800-53R4.
• 3–5 years of cyber vulnerability/risk management experience.
• Experience coordinating cybersecurity assessments and audits.
• CISSP or CRISC certification preferred; experience developing policies and standards.
• Cybersecurity in data center and cloud environments.

Responsibilities

• Perform risk analysis using RMF and other standards-based guidance, track risks through the lifecycle.
• Analyze vulnerability data from scanners and intelligence sources to determine severity and impact.
• Design and coordinate implementation of cyber security controls with technical teams.
• Coordinate system security plans and ensure compliance with standards and policies.
• Collaborate with peer organizations to assess risk for shared systems and technologies.
• Conduct baseline cybersecurity compliance assessments against documented requirements.
• Ensure SAIC and in-scope systems are patched per schedule and requirements.
• Provide input on new risks and recommended actions; prepare senior management briefings and reports.
• Coordinate annual cybersecurity assessments across multiple vendors and service providers; support business continuity and disaster recovery.

Skills

Cyber risk management

Vulnerability management

RMF

NIST SP800-53R4

Security controls design

Policy & standards

Reporting & visualization

Cloud & data center security

ITSM/ServiceNow

Education

Bachelor's Degree in related discipline

Tools

Tenable

Qualys

ServiceNow

Job description

SAIC is seeking a remote Senior Cyber GRC Analyst to join our team providing Security Operations Services for a major state & local government customer located in Texas. This position reports to our Technical Director and is a member of the team providing security planning, management and oversight for data center and cloud services.

Working with fellow team members, the Senior Cyber GRC Analyst will be primarily responsible for activities associated with cyber vulnerability management, cyber risk management, threat intelligence, establishment of standards and policy, and supporting related tasks and recurring deliverables.

• Using the NIST Risk Management Framework (RMF) and other standards-based guidance, perform risk analysis including identification, recommendation of mitigations, and tracking of risks throughout their lifecycle
• Analyze and assess vulnerability data from scanning tools, cyber intelligence or other resources to determine validity, severity and impact to SAIC customers
• Using NIST SP800-53 r4 and other references, design and coordinate the implementation of cyber security controls with technical teams
• Coordinate and oversee the development of system security plans and compliance with standards and policies
• Interact with peer supplier organizations in the assessment of risk for their systems and technologies, and coordinate risk management and response activities
• Perform baseline assessments of cybersecurity compliance against documented standards and requirements
• Help to ensure that SAIC and in-scope systems are patched according to approved schedule and requirements
• Provide input and assessment of new risks and recommend actions
• Coordinate annual cybersecurity assessment across multiple vendors and service providers; Provide senior management and executive briefings, summaries and reports on activities, assessments and cyber security posture
• Coordinate business continuity and disaster recovery activities
• Lead maintenance of policy, procedures, and related job aid documentation

• Bachelor’s Degree in related discipline and five (5) years related experience; Information Security)
• ~3-5 years of experience with cyber risk management including the NIST RMF and SP800-53R4
• ~3-5 years of experience with cyber vulnerability and/or risk management
• ~3-5 years of experience providing and coordinating cyber security assessments and audits
• ~ Cybersecurity certification (CISSP or CRISC preferred; Experience with the development and documentation of cybersecurity policies and standards
• ~ Cyber security in data center and cloud environments
• ~ Ability to create reports and visualizations to support Risk & Compliance activities
• ~ Experience with Vulnerability Management & Compliance scanning tools such as Tenable or Qualys.
• Experience with ITSM/Reporting tools such as ServiceNow

SAIC is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For ongoing news, please visit our newsroom.