Security Compliance Analyst

About Us:

CyberEye Consulting is an expanding woman-owned small business that specializes in Cybersecurity for government clients. We have been in business since 2019. This position is for a current contract with a Federal health agency. The candidate should be located within the proximity of Bethesda, Maryland. This contract allows for 80% telework.

Security Compliance Analyst Position Description:

• Extensive knowledge in all steps of the NIST SP 800-37, Rev. 2 Risk Management Framework (RMF)
• Ability to create and maintain Authority to Operate (ATO) documentation
• Experience in implementing NIST SP 800-53, Rev. 5 Controls and assessing NIST SP 800-53A Test Cases
• Experience in assisting System Owners/System Teams in documenting the implementation of security controls within the Security System Plan (SSP)
• Ability to facilitate/lead Contingency Plan Test, Incident Response Test and creating After Action Reports (AAR)
• Experience planning for Security Control Assessments (SCAs) in preparing Security Assessment Plans (SAPs)
• Previous experience in documenting results in Security Assessment Report (SAR)
• Possess knowledge in Plan of Action and Milestones (POA&M) management

Required Qualifications:

• Possesses strong analytical, written and verbal communication skills
• Requirement to be in the office once per week
• Bachelor’s Degree with 2 years of relevant experience or Associate’s Degree with 7 years of relevant experience
• Maintains at least one Cybersecurity-related certification (e.g. CGRC)
• Must be able to obtain a Public Trust clearance

Preferred Qualifications:

• Possesses CISSP, CISA, and/or CISM
• Experience supporting Federal Civilian agencies

Job Type: Full-time

Pay: $77,948.00 - $85,284.00 per year

Compensation package:

• 1099 contract
• Yearly pay

Experience level:

• 2 years

Schedule:

• Monday to Friday

Work Location: Hybrid remote in Bethesda, MD 20817