Senior Information Systems Security Analyst / Team Lead

at  Spry Methods Inc

WHO WE’RE LOOKING FOR (POSITION OVERVIEW):

Spry Methods is on the search for a Senior Information Systems Security Analyst / Team Lead supporting on of our government customers.

WHAT YOU NEED TO SUCCEED (MINIMUM REQUIREMENTS):

• Must possess all of the certifications below:
• A. Certified Information System Security Professional (CISSP).
• b. Certified in Governance, Risk and Compliance (CGRC) certification.
• c. Certified Information Privacy Professional (CIPP)
• d. Certified Cloud Security Professional (CCSK) and other Cloud Certification as appropriate
• Understanding of the principles, methods, or tools for developing, scheduling, coordinating, and managing projects and resources, including monitoring work, and performance.
• Understanding of the principles, methods, and tools of quality assurance and quality control used to ensure a product fulfills functional requirements and standards.
• System Demonstrated understanding of the US Federal Government Cyber Security and Privacy Laws, Policies, Directives, Procedures, and NIST standards.
• Experience performing System Security Assessment and Risk Assessment / Security Authorization to Operate support, and Privacy risk management of systems hosted in the cloud using IaaS, PaaS, and SaaS models and on-prem for US Federal government agencies using US Federal Cybersecurity and Privacy Laws, Regulations, and NIST Standards.
• Experience and understanding of information assurance, cybersecurity, privacy policies disciplines, methodologies including but not limited to National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), FedRAMP and applying Security and Privacy concepts, methodologies, principles, procedures and using industry-standard IT security tools.
• e. Expertise and experience performing assessment of web applications, network protocols, ports, services, auditing capabilities, user authentication, Access control techniques, encryption technologies, database security, and requirements NIST security standards.

• The role of the Team Lead is to serve as the primary source of contact for the government, produce monthly reports, and provide guidance to the rest of the team in the successful execution of the program