High Value Asset (HVA) Program Operations Support Analyst

Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. Originally founded as a Veteran-owned company, we remain deeply committed to supporting veterans and proudly serving customers across the Federal Government and private sector. We have an opening for a full-time High Value Asset (HVA) Program Operations Support Analyst to join our talented, dynamic team in support of our latest government client.

Veterans are encouraged to apply.

Duties

The HVA Program Operations Support Analyst is responsible for the strategic oversight and operational management of an organization's HVA Program. This includes identifying, assessing, securing, and maintaining the integrity of critical systems, data, and infrastructure designated as HVAs, in alignment with federal policies, such as the US Office of Management and Budget (OMB)memoranda and US Department of Homeland Security (DHS) directives. The role requires close collaboration with internal and external stakeholders to ensure compliance, improve cybersecurity measures, and mitigate risks to the government’s most critical assets.

Key Responsibilities:

• Recommend strategies for the identification and classification of High Value Assets within the organization following OMB and DHS guidelines.
• Develop and maintain an inventory of HVAs, ensuring their categorization and prioritization based on criticality and risk.
• Facilitate risk assessments of HVAs to evaluate vulnerabilities, threats, and impacts.
• Collaborate with security teams to implement controls and remediation plans to mitigate risks to HVAs.
• Ensure alignment with the NIST Cybersecurity Framework and relevant NIST Special Publications (e.g., NIST 800-53, NIST 800-37).
• Develop, implement, and update HVA-specific security policies, procedures, and guidelines.
• Ensure compliance with relevant federal directives, including OMB Memoranda (e.g., M-19-03, M-21-31) and DHS Binding Operational Directives (e.g., BOD 18-02).
• Oversee the implementation of continuous monitoring practices to track the security status of HVAs.
• Ensure compliance with Federal Information Security Modernization Act (FISMA) requirements and collaborate with department FISMA teams regarding ongoing risk management.
• Review efforts to develop and test incident response plans specific to HVAs.
• Validate responses to cybersecurity incidents affecting HVAs, ensuring timely containment, recovery, and reporting as required by federal standards.
• Participate in agency meetings as determined by department leadership to represent the HVA program operations.
• Conduct training sessions for stakeholders and personnel involved in HVA management to ensure awareness of policies, risks, and responsibilities.
• Serve as the liaison between the organization, DHS, OMB, and other federal oversight bodies regarding HVA-related activities.
• Prepare and deliver reports on HVA program performance, security risks, and compliance to executive leadership and federal stakeholders.

Requirements

• Bachelor’s degree in Information Security, Cybersecurity or other related field; 2 years of experience may be substituted for degree.
• 1 years of experience in cybersecurity, risk management, or information assurance, with at least fundamental knowledge of prioritizing systems or managing High Value Assets or other critical systems.
• Experience working with federal cybersecurity programs and frameworks (e.g., FISMA, NIST frameworks).
• Knowledge of OMB HVA policies, DHS Binding Operational Directives, and NIST Special Publications.
• Strong understanding of risk management principles and processes, including vulnerability assessments and security controls.
• Excellent communication and presentation skills, with the ability to convey complex technical information to diverse audiences utilizing reports and visualization tools.
• Proven leadership and project management capabilities.

Preferred Qualifications:

• Familiarity with federal audit processes and reporting requirements.
• Experience collaborating with DHS and OMB on HVA management initiatives.
• Knowledge of emerging threats and technologies related to critical infrastructure protection.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Authorization Professional (CAP), Security+, Cybersecurity Analyst+, or similar certifications are a plus.

Benefits

Maveris attracts and retains talent of the highest caliber by offering opportunities to work in e