Job Description Help for Job Description. Opens a new window.

Role:

IT Systems Compliance Analyst Duration:

6 months with a potential for extension/conversion

Location:

100%

Remote Required:

1. Experience implementing and supporting the following

Security Frameworks:

NIST 800-53, DISA

Security requirements, CIS, HITRUST, PCI for a major operating system or component such as FW, RHEL, Windows, DB, WEB in a large enterprise environment. 2. Familiarity with basic enterprise audits, including

SOC 2, FISMA, MAC ARS, DOD 3.

Experience interfacing with internal and external auditors. 5. Familiarity with utilizing Cloud tools such as WIZ, GAS, and TeleForm templates Description IT Systems Compliance Analyst are responsible for monitoring our compliance programs for Infrastructure and Cloud Services. This includes overseeing and evaluating government and commercial product and program regulations and requirements to promote and sustain organization integrity. The position is also responsible for identifying, defining, communicating, and managing the compliance program requirements and key performance indicators for government and commercial business. IT Systems Compliance Analysts are responsible for maturing the Compliance Program. Resource will interface with various audit and security personnel, providing policies, procedures, and device evidence required for specific platforms. Collaboration with technology owners on application of policies, procedures and audit requirements Interpret policies and procedures for accuracy and technical sensibility. Manage documentation and evidence repositories for access during audit events (Automated Scans, Manual Scripting, etc.). Develop policies and procedures and ensure that the current procedures are updated with current information and available for review for compliance with

CMS, ARS, HITRUS, SOC2, DISA

policies, procedures, and standards. Ability to navigate the

DOD DISA

public-facing site to include the STIGS Document Library & the STIG Viewer application (xccdf). Understanding of

NIST 800-XX

controls Participate in discussions with all levels of leadership to articulate current state of the program. Advise on mitigation and remediation strategies for any variances or ensure they are documented in a Corrective Action Plan (CAP). Perform hardware and software evaluations to maintain established baseline integrity. Provide evidence to assist with internal and external audits. Ensure self-inspection checklists are completed against policies, procedures, and evidence for compliance audits. Ensure self-inspection checklists are completed against defined infrastructure platform baselines. Gather evidentiary documentation to support audit findings from compliance audits periodically throughout the year. Ability to navigate a SQL relational database: clauses, expressions, predicates, queries, and statements. Working experience with excel Other duties as assigned.

Required Experience:

3-5 years of related work experience or equivalent combination of transferable experience demonstrating proficiency and experience in design, implementation, monitoring and troubleshooting technology

Additional Required Qualifications:

Four or more years demonstrated proficiency and experience in design, implementation, administration, monitoring and troubleshooting technology. Knowledge of information security principles, including risk assessment and ...For full information see follow application link.

SPECTRAFORCE

is an equal opportunity employer and does not discriminate against any employee or applicant for employment because of race, religion, color, sex, national origin, age, sexual orientation, gender identity, genetic information, disability or veteran status, or any other category protected by applicable federal, state, or local laws. Please contact Human Resources at nahr@spectraforce.com if you require reasonable accommodation.