Cyber GRC Analyst Principal at SAIC

Washington, District of Columbia, United States -

Full Time

Start Date

Immediate

Expiry Date

25 Dec, 25

Salary

0.0

Posted On

26 Sep, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Systems Security, Compliance, Cyber Security Awareness, Policy Management, NISPOM, NIST 800-53, Risk Management Framework, Technical Engineering, Administrative Processing, Compliance Reporting, Interpersonal Skills, Incident Response Plan, Security Clearance, Operating Systems Configuration, Security Tools, DCSA Inspections

Industry

Defense and Space Manufacturing

Description

SAIC office located at 80 M Street, Southeast, Washington, DC is looking for an Information Systems Security Manager (ISSM) responsible for implementing information systems security tasks, as required for the safeguarding, handling, and controlling of classified information. This role has SOME work from home capabilities, on average 0-2x a week depending on work load and customer needs. Job Description: Knowledgeable in information systems security in order to assure enforcement of company and government regulations. Manages compliance, operations, cyber security awareness, and policy as it pertains to classified systems. An in depth knowledge of NISPOM, NIST 800-53, and Risk Management Framework is required. Monitors and evaluates the effectiveness of the enclave’s information assurance security controls to ensure they provide the intended level of protection. Duties will include but are not limited to technical engineering, administrative processing, compliance reporting, and interpersonal customer service skills. Candidate must possess the ability to operate independently without supervision. This is a cybersecurity senior analyst job requiring the applicant to be a self-starter and willingness to initiate communication with SAIC management and various Government agencies for support and/or compliance requirements. Minimum Required Qualifications: Bachelors and 8 years or more of related experience; 4 additional years of experience in lieu of degree. Currently possesses DoD IAM Level III Certification (CISSP, CAP, CISM, etc.). Active DOD Secret security clearance (SSBI investigation preferred). Experience in professional engagements with internal and external customers (AOs, SCAs, Program Managers, etc.). Experience with the secure configuration and auditing of various operating systems (Windows, Linux, Cisco IOS). Familiarity with systems security tools, such as ACAS, SCAP, HBSS, and eMASS. Familiarity with system security documentation, polices, regulations and frameworks such as NIST SP 800-53, DCSA Defense Authorization and Assessment Process Manual (DAAPM) National Institute of Standards and Technology (NIST) and Committee on National Security Systems Instructions (CNSSI). Experience working with MDA-CNet or DoD SIPRNet systems. Familiarization with Defense Counterintelligence and Security Agency (DCSA) inspections (i.e., Cyber Operational Readiness Assessment (CORA), Command Cyber Readiness Inspection (CCRI)). Familiarity with security policies, regulations, and frameworks (e.g., NIST, CNSSI). Desired Qualifications: Active DOD Top Secret level security clearance with SSBI. Experience in the implementation, management, and execution of an Incident Response Plan, to include required training and administrative inquires response to government agencies. Notify program stakeholders on risk levels, security posture of information security program and any changes affecting the program cybersecurity posture. Continuously validation of the DOD SIPRNet system program against DoD policies, guidelines, procedures and directives to ensure compliance.

Responsibilities

The Cyber GRC Analyst Principal will implement information systems security tasks to safeguard classified information. This role involves managing compliance, operations, and cyber security awareness related to classified systems.