Security Analyst

Job Description

Pay Range: $71.05hr - $76.05hr

• The Security Analyst will operate as an experienced cybersecurity consultant, supporting leadership, business units, partners, and vendors with risk management, compliance, and security assurance activities.
• This role focuses on Risk Management Framework programs, security architecture reviews, audit support, and continuous improvement of security and compliance practices.

• Strong working knowledge of FISMA, NIST, CMS MARS-E, and HIPAA Security and Privacy.
• Prior experience working within a FISMA-compliant program.
• Prior experience working with eGRC systems.
• Information Security certification from recognized bodies.

• Five or more years of experience in IT working with or auditing enterprise systems and infrastructure.
• Experience integrating RMF and Assessment and Authorization activities into the System Development Life Cycle.
• Experience supporting cloud security and vendor risk management.

• Perform architectural reviews and risk analysis of security-related requests.
• Review network design, information flows, and system and data access models.
• Review firewall rule requests and configuration deviation requests.
• Support vulnerability management activities.
• Champion the design, development, and continuous improvement of security and compliance initiatives.
• Audit and assess internal systems and partner or service provider security controls.
• Document and report audit and assessment activities using enterprise tools.

• Perform security and compliance reviews of contracts and data‑sharing agreements.
• Serve as the primary point of contact for third‑party audits and assessments.
• Collaborate with leadership and stakeholders to recommend risk mitigation strategies.

• Risk Management Framework and compliance analysis.
• Security architecture and risk assessment.
• Audit and assessment execution.
• Enterprise systems and infrastructure security.
• Stakeholder communication and collaboration.

• Prior ITIL experience in Information Security Management.
• Prior Health Information Technology experience.

• Bachelor’s degree in Computer Science or a related field, or equivalent experience.