Information Security Analyst -- PRADC5835912

• Direct Client
• Location: Richmond, VA (Hybrid)
• Role: Information Security Analyst

Job Description:

• Assessment and assurance background. Familiar with various frameworks like FISMA (would not be a deal breaker, but 100% work done will be governed by FISMA), NIST 800-53 (and other flavors too), SSAE* 18 framework from AICPA
• Main focus is on audits and assessment – facilitate those thru various interested parties
• Make sure remediations are taking place and there are controls.
• Don’t need to be project manager – but manage the things the go behind setting up controls
• Self-starter individual – work as a team but also work independently!
• Some security work as well as GRC work. Supporting security and GRC teams.

TOP SKILLS NEEDED – RANKED:

• Risk assessment and Analysis – primary – top – would love analytical mindset to avoid risks in advance by identifying them in advance
• Security Frameworks and Standards
• Governance, Risk & Compliance
• Metrics, Reporting and Data Analysis – beneficial of understanding on how to do reports and data analytics.
• Audit Control Evaluation