Security Compliance Analyst

Easy Dynamics Corporation is looking for a Security Compliance Engineer to support our Identity, Credential, and Access Management (ICAM) Program. This program is a part of a larger government-wide mandate to address implementation of ICAM security disciplines that enable the right individual to access the right resources, at the right time, for the right reasons. The objective of the Program is to provide oversight and coordinate efforts to implement the processes, policies, and technology necessary to deliver enterprise-wide identity, credential, and access management services across a user base exceeding one million individuals. The Program is responsible for providing ICAM related policy oversight and implementation guidance, managing the ICAM information technology portfolio, driving logical access compliance, and operating enterprise shared services for key ICAM capabilities in support of various enterprise missions. Additionally, the Program is working to modernize and automate service delivery as well as lower its risk to security incidents.

This position will be responsible to ensure alignment with our Security Compliance program which specifies various inspections and artifacts be completed in a timely manner throughout the year.

Responsibilities:

• Conducting systems security evaluations, audits and reviews
• Analyzing security controls and performing risk assessments for compliance against NIST, OMB, and other government standards. Document findings and security controls which satisfy requirements
• Support the team regarding external audit inquiries and follow action items to resolution.
• Providing subject matter expertise and answering questions relating to NIST SP 800-63, identity standards, and other relevant standards
• Scheduling meetings, setting agendas, facilitating sessions to achieve specific objectives.
• Leveraging Jira to actively track open tickets and backlog. Work in an agile team to update, complete, and close tickets
• Continually evaluate progress against security compliance objectives and deadlines to ensure initiatives are on track
• Conducting quality assurance reviews for deliverables; providing comments, feedback, and the potential opportunity for mentorship of junior employees
• Manage the A&A System of Record (CSAM) and documentation to ensure compliance

Qualifications:

• Experience working in an Agile team environment
• Comfortable building your own priorities to ensure project deliverables stay on track
• Attention to detail in reading comprehension, writing, and oral communications. Dedication to quality in all deliverables (e.g., grammar, syntax, neatness, completeness, polished).
• Comfort with a flat organizational structure – self-starting and willing to ‘own’ delivery of artifacts/initiatives
• Comfortable working directly with government leads and those outside of your organization to capture and document security assessment and compliance details
• Critical analysis skills and the ability to synthesize information from disparate sources into recommendations or conclusions
• Experience in use of MS Office suite (PowerPoint, Excel, Word, Project) to create a variety of deliverables.

Preferred:

• Experience working with NIST standards such as 800-63, 800-53, 800-37, Risk Management Framework or Cybersecurity Framework, or general familiarity with digital identity or risk management concepts