IT Security Governance Analyst

Job Family:

IT Cyber Security

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Our Security Governance Sr. Analyst is a member of a service-oriented team with upwards to six (6) personnel within the Information Security Governance team that are focused on policy development/management, Engagement Data Security Plan (EDSP) management, Travel assessments, and documentation management. Effectively supports and executes multiple or more complex IT Security Governance projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse security governance, maintaining, and protecting Guidehouse and Client data to the NIST SP 800-171 standards, managing Engagement Data Security Plan (EDSP) implementation and execution for the Company, and manage the compliance and execution of the IT Travel Security program. Reports directly to the IT Security Governance Manager.

• Achieves operational targets within IT Security Governance area with direct impact on results

• Executes daily work within existing procedures and guidelines

• May influence other technical staff through explanation of facts, policies and practices related to job area

• Communicates with contacts typically within the project area or technical department on matters that involve obtaining or providing information requiring some explanation or interpretation in order to reach agreement

• Entry to established level technical individual contributor

• Builds on knowledge of an industry or segment and works to deepen experience across a range of projects

• Follows operating guidelines and identifies recommended enhancements in processes to improve effectiveness of IT Security Governance area

• Works under close to limited supervision on small to midsize projects or assignments

• Requires general instructions for new lines of work or special projects

• Assists with the implementation and executes on technical initiatives and solutions

• Relies on limited experience and judgment to plan and accomplish assigned tasks and goals

What You Will Need:

• United States Citizenship

• Bachelor's Degree preferred

• Minimum 2-4 years of prior relevant experience desired; (Relevant experience may be substituted for formal education or advanced degree)

• Shall possess one or more of the following certifications (preferred):

  • (ISC)2 Certified Information Security Professional (CISSP)

  • ISACA Certified Information Security Manager (CISM)

  • ISACA Certified Information Systems Auditor (CISA)

  • ISO 27001 Certified Lead Auditor

  • ISO 9001 Certified Lead Auditor

  • Project Management Professional (PMP)

  • Security+

• Must be able to work East Coast US business hours

• Experience documenting processes and procedures to comply with required NIST and IT standards

• Ability to work on many concurrent and changing priorities – flexibility is a must

• Action-oriented and able to manage and meet aggressive timelines and deadlines

• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Experience working with Governance Risk and Compliance tools beyond the manual processes of excel sheets, folders, and emails

• Experience with NIST SP 800-53

• Experience with Microsoft Azure Compliance Center

• Working knowledge of Active Directory, Exchange, SharePoint, and Teams

• Demonstrated ability to learn and document new technologies/solutions

• Experience with ServiceNow is a plus

• Experience working in an ITIL environment

The annual salary range for this position is $66,700.00-$100,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family