What are the responsibilities and job description for the Information Security Compliance Analyst (Bethesda, MD) position at ActiveSoft, Inc?
Information Security Compliance Analyst
Bethesda, MD one day a week onsite rest of them Remote(Monday - Onsite)
12 months Contract
Qualifications:
• Minimum of 3 years of experience consulting to the US Federal government, evaluating the security posture of information systems in accordance with federal information security requirements and industry leading guidance and providing risk-based observations and recommendations for information systems security, controls, and operation in connection with conducting A&As for ATOs
• Demonstrated comprehension and application of standards and guidance per the National Institute of Strategy and Intelligence (NIST), the Committee on National Security Systems (CNSS), and the Federal Information Security Modernization Act (FISMA) following Federal Information System Controls Audit Manual (FISCAM) and the Government Accountability Office (GAO) Standards for Internal Control in the Federal Government ("Green Book"), NIST Special Publications (SP) 800-37 and NIST 800-82 Rev 3:, and NIST Federal Information Processing Standards (FIPS) 199 and 200
• Demonstrated experience working with information system stakeholders in aiding them to understand information security requirements related to federal and industry standards, i.e., NIST, DHS 4300A, CNSS, and design and operate information security controls
Must have working experience skills:
Documentation:
A&A:
Operation Technology/OT:
POA&M:
NIST 800-82 Rev 3:
FISMA:
Federal Government Experience :
ATO:
AWS/Azure
