Description

Overview

Tanaq Support Services (TSS) delivers professional, scientific, and technical services and information technology (IT) solutions to federal agencies in the health, agriculture, technology, and other government services. TSS is a subsidiary of the St. George Tanaq Corporation, an Alaskan Native Corporation (ANC) committed to serving Federal customers while also giving back to the Tanaq native community and shareholders.

About The Role

We are seeking an Information Systems Security Analyst to work collaboratively with our federal government client to deliver security solutions to the government and their stakeholders. Candidate will collaborate with customer technical and non-technical leadership to create security solutions that meet customer needs and adhere to the customer's established performance and security standards. The Information Systems Security Analyst will provide IT Security support to client information systems and serve as an IT Security consultant and advisor to system stakeholders on matters related to regulatory compliance, security controls, threats, and vulnerabilities.

This is a fully remote position that can be based in Atlanta, GA, or anywhere in the U.S.

Responsibilities

Support and assist system security activities to ensure adherence to applicable, federal IT security policies and procedures
Provide a full range of support for Security Assessment and Authorization (SA&A) activities
Recommend creative technical solutions to security challenges that incorporate evolving security regulations, policies, and mandates into agency systems
Advise, consult, and assist IT security personnel with evaluating, testing, and implementing technologies to augment the security of IT components such as user authentication and validation, data encryption, secure key storage, PKI key management, Smart Card integration, and mitigating identified system security vulnerabilities as they arise
Work with senior-level system owners, mission leads, IT Governance, and the Information Systems Security Officer (ISSO) to ensure system compliance and protection activities of software development projects
Work with program and technical teams to perform security analysis on technical solutions and provide security compliance and guidance input as required
Assist system owners with identifying and utilizing relevant enterprise shared services and solutions to enable compliance and security activities
Become a trusted security subject matter expert supporting various mission leaders and activities
Facilitate table-top exercises
Manage the SAA process for assigned systems including development of NIST compliant System Security Plans, Rules of Behavior, Continuity of Operations and Disaster Recovery Plans, Risk Assessments, Interconnection Security Agreements, Incident Response Plans, Data Sharing and Use Agreements, PIA, BSI, etc.
Following formal approval, maintain system authorizations through proactive monitoring of system compliance, formal change management, corrective actions, and package updates
Develop and maintain system risk assessments and, as/if needed, remediation and mitigation plans
Perform technical IT system security/vulnerability assessments using provided tools – interpret results and manage remediation's as needed
Support various other security-related activities including facilitation of change control processes and data call responses; management of encrypted / secure data storage devices; and the evaluation, justification, and management of software and third-party website approvals
Develop and maintain a solid working knowledge of our federal government customer and federal security regulations, policies, laws, and requirements
Evaluate systems for compliance with Federal security requirements and develop reports of findings and corrective action plans
Conduct vulnerability scans and determine appropriate mitigations
Perform security reviews and document findings and recommendations

Requirements

Required Skills and Experience

Previous experience working at a federal government agency preferred
Minimum of 2 years of experience as Information Systems Security Analyst
Experience with industry standard security / vulnerability assessment tools
Information security and compliance knowledge
Strong understanding of Microsoft SharePoint architecture
Security policy development and process implementation experience in public health Federal government agencies preferred
Security policy development and process implementation experience in Federal agencies preferred
Desire and ability to quickly obtain industry certifications if needed
Demonstrated knowledge of computer operating systems and networks, component architectures, application development, and/or data management processes and technologies – the successful candidate must understand the fundamental technical components, processes, and interactions of enterprise-level information systems
Demonstrated knowledge of fundamental information security concepts and processes such as risk assessment and mitigation strategies, security control techniques and technologies, assessment and evaluation methods, and user access control methodologies
Excellent analytic skills – the successful candidate must be able to receive information, digest it, and apply standards and requirements to that information and to produce a clear and effective evaluation / assessment
FedRAMP experience highly desired
Demonstrated technical documentation capability
Excellent communication skills - both written and verbal
Demonstrated problem-solving capability
Ability to effectively manage time, and prioritize and execute tasks in a high-pressure environment
Must be able to work independently and within deadlines
Ability to pass required Federal background screening / security check including basic and expanded investigations
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

Education and Training

Bachelor’s degree in Computer Science, Information Systems Management, or a related field
One or more industry certifications including CISSP, SANS GIAC Certifications, IAT Level I-III, or NSA’s IAM/IEM preferred

Physical Requirements

Prolonged periods of sitting at a desk and working on a computer. May need to lift up to 25 pounds occasionally.

Who We Are

Tanaq Support Services strives to deeply understand and analyze our clients’ vision, needs, and requirements so we may provide alternative solutions, empowering them to choose the best resolution. We aim to achieve excellence by delivering on our commitments to our clients, employees, and partners.

TSS is an Equal Opportunity and Affirmative Action Employer and participates in E-Verify. All employment decisions are based on merit, qualifications, and abilities. We welcome and encourage diversity in our workforce. Our policies provide equal employment opportunity to all employees and qualified applicants without regard to race, color, religion, national origin, sex, age, disability, pregnancy, sexual orientation, gender identity, transgender status, genetic information, protected veteran status, or any other protected characteristic under federal, state, or local laws. For more information, visit Know Your Rights and Pay Transparency Statement.

If you are an individual with a disability and need assistance completing any part of the application process, please email accommodation@tanaq.com to request a reasonable accommodation. This email is for accommodation requests only and cannot be used to inquire about the status of applications.

To View This Job Posting And Apply, Visit

https://recruiting.paylocity.com/Recruiting/Jobs/Details/2606902

Information Systems Security Analyst

Tanaq Health

New Jobs

Information Systems Security Analyst