Information Assurance/Security Controls - TS/SCI onsite

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Work You’ll Do

We are seeking an Information Assurance Analyst/Security Controls Assessor (SCA) to assist with assessing government programs/systems/etc. for ATO

• Analyzes and defines security requirements for applications and systems across all technology layers
• Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in cybersecurity
• Performs assessment and risk analysis of systems and applications during all phases of the system development lifecycle
• Participate, and sometimes lead, in the planning/execution/reporting of security audits and network vulnerability assessments with minimal supervision
• Perform interviews, examinations, and testing of security controls
• Assist in preparation of assessment deliverables - Security Control Assessment Report, Security Risk Assessments, etc.
• Plan, execute and report on information technology, privacy, and operational reviews in order to identify mission, privacy, security, compliance, information technology and regulatory risks.

The Team

Deloitte’s Government and Public Services (GPS) practice – our people, ideas, technology, and outcomes—are designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments.

Qualifications 

Required: 

• Bachelor’s degree required.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
• Active TS/SCI security clearance.
• Must be IAT III certified while working in this role.
• Travel up to 15%, on average, based on the work you do and the clients and industries/sectors you serve. 
• Must be able to work onsite in St Louis, MO.
• 8+ years of cybersecurity related information technology experience.
• A minimum of 4 years’ experience as an Information Assurance (IA) Analyst, SCA, ISSM or similar cybersecurity role with a focus on activities aligned to the Risk Management Framework.
• 1+ years experience using the Xacta cybersecurity platform.

Preferred Qualifications:

• Experience with FEDRAMP package analysis is preferred.
• At least one completed professional security certification such as: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, CISSP, CASP
• Master's Degree in Cybersecurity or related field.
• Experience interfacing with varying levels of leadership within the cybersecurity organization.

As used in this posting, "Deloitte" means Deloitte Transactions and Business Analytics LLP, a subsidiary of Deloitte LLP. Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

Information for applicants with a need for accommodation: https://www2.deloitte.com/us