PaaS Security/Privacy Coordinator

Introduction
Information and Data are some of the most important organizational assets in today’s businesses. As a Security Consultant you will be a key advisor for IBM’s clients analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client’s organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities
Seeking a candidate with DTC experience and the proven ability in completing documentation for VA’s implementation of NIST 800-53r4 and associated FISMA ATO required documentation:

• Business Impact Analysis (BIA)
• Configuration Management Plan (CMP)
• Control Plan Technical Guidance
• Disaster Recovery Plan (DRP)
• Information System Contingency Plan (ISCP)
• Privacy Threshold Analysis (PTA)
• Privacy Impact Analysis (PIA)
• Security Impact Analysis (SIA)

– Implementing VA’s Governance Risk Compliance (GRC) and implementation of Enterprise Mission Assurance Support Service (eMASS).
– Understand Software As A Service (SaaS) and Platform As A Service (PaaS) Control Based Standard Operating Procedures (SOPs) as outlined within the NIST 800-53r4.
– Follow best practices to work within the VA Cyber Security Practices and Procedures
– Knowledge of Office of Information Services (OIS) implementation of ‘Assess Only’ SaaS and Major application modules and inheritance relative to PaaS) .
– Communicate with various VA Privacy Offices and the PIA Support office.
– Understand VA Privacy SOP’s and ability to process documentation according to their requirements.
– Bring contributing assets together to complete documentation resolve issues and maintain all VA Privacy requirements pertaining to the VA Authority To Operate security boundaries.

Required Technical and Professional Expertise

• Must have at least 5 plus years of related cyber security experience and experience with VA DTC Programs.
• Must have 3+ years of hands-on experience working cloud-based systems (SaaS and/or PaaS) through the FedRAMP authorization process (RMF Steps 1-5 and ideally step 6 (Continuous Monitoring)) MOU/ISA SSO ESECC.
• Ability to work across a wide variety of different departments within the VA and DTC organization.
• Knowledge of Salesforce and can utilize dashboards to look up and reference application records research artifacts and engage in Salesforce proprietary Security Change Control (SecRisk) processes specific to VA’s implementation of Salesforce platform Security boundary.
• Must have current at least Security Clearance Level: Active Public Trust Tier 4 (VA)

Preferred Technical and Professional Expertise
N/A