Systems Analyst

About Us:

At RELI Group, our work is grounded in purpose. We partner with government agencies to solve complex challenges, improve public health, strengthen national security, and make government services more effective and efficient. Our team of over 500 professionals brings deep expertise and a shared commitment to delivering meaningful outcomes. Behind every solution is a group of experts who care deeply about impact - whether we’re supporting data-driven decisions, modernizing systems or safeguarding critical programs.

The CyberSecurity Assessor provides support to the Department of Health and Human Services, Indian Health Service (IHS). This position is responsible for executing and assisting in the completion of security certifications and for providing support in the development and implementation of a program to manage all aspects of compliance with government regulations

RESPONSIBILITIES

Essential duties and responsibilities include the following. Other duties may be assigned.

• Conducts annual security controls effectiveness testing and manages the entire assessment lifecycle, including interfacing significantly with system owners and ISSOs in obtaining the system ATO.
• Assists system owners in developing security authorization packages that are fully compliant with National Institute of Standards and Technology (NIST) guidelines and organizational defined standards including: NIST SP-800-53, -30, -37, -115, at a minimum.
• In depth understanding of all NIST SP-800-53 rev5 controls and FedRAMP to ensure proficiency in conducting efficient assessments (interview, exam, testing).
• Evaluates the system documentation such as the SSP, ISCP, IRP, CMP, and SCRMP.
• Verifies the written SSP for compliance against the agency requirements and documents gaps.
• Evaluates the system scan reports for vulnerability and compliance.
• Documents findings and provides remediation recommendations on all applicable systems in accordance with established policies and procedures.
• Brief system stakeholders on findings to include, at a minimum, corrective recommendations for deficiencies, and POA&M explanations to correct deficiencies.
• Develops and authors various documents such as kick-off slides, security assessment plans, and security assessment reports.
• Proficient in Microsoft Office (Word, Excel, PowerPoint, etc.) and project management tool (i.e., JIRA).
• Manages each assessment as a project and ensures progress and proactive management and escalation, if needed.
• Proficient with a GRC tool (i.e., Archer).
• Responsible for aiding in own self-development by being available and receptive to all training made available by the company.
• Plans daily activities within the guidelines of company policy, job description and supervisor’s instruction in such a way as to maximize personal output.
• Responsible for keeping own immediate work area in a neat and orderly condition to ensure safety of self and co-workers. Will report any unsafe conditions and/or practices to the appropriate supervisor and human resources. Will immediately correct any unsafe conditions to the best of own ability.
• Promotes and encourages a culture of compliance with all applicable rules (federal, state, local, Federal Acquisition Regulations, Code of Federal Regulations, Prime Contract requirements, etc.) for themselves and the company as a whole. Fosters an environment in which they will report any violations or reasonably suspected violation of RELI policy, FAR, and/or CFR and are comfortable discussing the myriad compliance, conflict, FAR, CFR, etc. issues that arise during the performance of a government contract.

Qualifications

EDUCATION/EXPERIENCE

• Bachelor's degree in Computer Science or a related field of study and a minimum of eight (8) years’ relevant experience, or equivalent combination of education / experience.
• Must have at least eight years (8) of information security experience and with at least four (4) years of certification and accreditation (C&A) compliance / Security Assurance (SA) experience (NIST based).

CERTIFICATES, LICENSES, REGISTRATION

• CGRC (CAP), CRISC, CISSP, CISM, CISA, Security+, Network+ and/or other related cybersecurity certifications required.

JOB SPECIFIC KNOWLEDGE / SKILLS / ABILITIES

• In depth knowledge of NIST SP 800 series and FedRAMP guidance and standards.
• Highly organized with ability to effectively manage multiple projects and priorities.
• Ability to work in a fast-paced environment and to learn and apply new knowledge and techniques related to incident response and continuous monitoring capabilities.
• Ability to effectively work both independently and in a team environment for the successful achievement of goals.
• Excellent verbal and written communications skills with ability to prepare quality reports and effectively communicate / interact with a wide variety of technical and non-technical audiences (i.e., customers, team members, management, and federal staff).
• Excellent critical thinking skills with ability to identify, analyze and resolve problems / complex issues.
• Working knowledge and understanding of OMB, FISMA, FIPS, HIPPA and other federal regulations and requirements associated with Information Security.
• Knowledgeable of security-related processes with respect to Federal risk and compliance regulations best practices.
• Ability to read, analyze, and interpret common information systems security documents.
• Expert computer skills with advanced proficiency in a Windows and Linux based computer environment.

EEO Employer:

RELI Group is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

HUBZone:

We encourage all candidates who live in a HUBZone to apply. You can check to see if your address is located in a HUBZone by accessing the SBA HUBZone Map.

The annual salary range for this position is $85,000 to $95,000. Actual compensation will depend on a range of factors, including but not limited to the individual’s skills, experience, qualifications, certifications, location, other business and organizational needs, and applicable employment laws. The estimate displayed represents the typical salary range for this position and is just one component of the total compensation package for employees. RELI Group provides a variety of additional benefits to its employees. For additional details on the benefits that RELI Group offers click here