Principal Security Analyst

Oracle Health Client Advocacy and Compliance Strategy (CACS) under Security and Compliance Organization focuses on protecting client healthcare data through secure healthcare applications, networks, and communications as it relates to clients’ regulations, standards, policies, and operational mandates. We manage client relationships to strategize, prioritize and meet contractual obligations for security compliance.  CACS has an opportunity available for an experienced energetic, motivated, cyber security analyst to support our federal and commercial customers. The successful candidate will be responsible for providing security analysis and Cybersecurity support for our federal clients. The cyber security analyst has experience with NIST 800-37,” Guide to Applying Risk Management Framework to Federal Information Systems,” NIST 800-53rev5 “Security and Privacy Controls for Information Systems and Organizations,” and NIST 800-171, “Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations,” Cyber Security Policy and security engineering principles. The successful candidate must be well versed in applicable laws and standards such as HIPPA, HITECH, and NIST 800-53, NIST 800-171 to implement secure applications, and networks. They must have familiarity and experience in the implementation of cyber security requirements to follow FISMA and FedRAMP guidelines.  

Essential Functions and Job Responsibilities: 

Duties and responsibilities may include, but are not limited to:

•   Assess the Cyber Security risk of application, technologies and networks migrating to Oracle Cloud Infrastructure and documenting in formal risk assessments and supporting artifacts associated with the Federal Assessment and Authorization process

• Identify security risks through the security impact analysis and system risk assessments
• Apply knowledge of security principles, policy, and regulations to daily tasking
• Provide IT security engineering support to cross-functional project teams to ensure that security policies, processes, and controls are adhered to, planned for, and implemented throughout the project lifecycle
• Knowledgeable working in the FedRAMP cloud environment understanding IaaS, PaaS, and SaaS in regard to cloud service provider security control responsibilities and customer responsibilities
• Effectively and efficiently communicate and collaborate with external and internal customers to analyze and monitor a project’s security posture and status
• Able to lead a small team of security analyst and / or tasks
• Effectively following-up with key project team members
• Engage with client on security matters
• Able to be task lead to small team of Cyber Security Analysts to provide deliverables and services to government client.

Career Level - IC4

Minimum Requirements: 

•   Bachelor’s Degree or higher in computer science, electronics engineering, or other engineering or technical discipline is required; ten (10) years’ experience may be substituted for education requirement

• At least seven (7) years of related experience, including experience with:
  • Risk Management Framework
  • Authorization Requirements Process for Federal Government
  • Information Assurance
  • FISMA and/ or FedRAMP requirements
• CISSP or ISSEP or CCSP or CompTIA + or OCI security certifications
• Expert technical knowledge of risk management, and information security concepts and technologies
• Experience with Cyber Security document management and familiar with security and privacy rules
• Excellent verbal communication skills
• Excellent written skills for preparing reports and briefings
• Excellent analytical and problem-solving skills
• Ability to facilitate and coordinate efforts with key government and non-government stakeholders
• U.S. Citizenship is required as is successfully passing a thorough Government background screening process requiring the completion of detailed forms and fingerprinting
• Ability to obtain a public trust
• Previous Government contracting work experience

 

 

Disclaimer:

Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only

US: Hiring Range: from $103,300 to $223,500 per annum. May be eligible for bonus and equity.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle’s differing products, industries and lines of business.
Candid