Note: The job is a remote job and is open to candidates in USA. QBE, LLC delivers technology, cybersecurity, and mission-support solutions to federal government customers. The company is seeking a Cyber Information Systems Analyst - SME to provide independent security control assessment expertise supporting NIH/OD-OIT, including planning assessments, evaluating controls, documenting findings, and coordinating activities with stakeholders.
Responsibilities
- Plan and conduct independent security control assessments
- Develop Security Assessment Plans and test procedures
- Review security documentation and supporting control evidence
- Interview system personnel and evaluate control implementation
- Perform technical and procedural testing of applicable controls
- Document assessment findings and supporting evidence
- Develop Security Assessment Reports and risk statements
- Maintain organizational independence between assessment and system implementation functions
- Evaluate remediation evidence for identified deficiencies
- Coordinate assessment schedules and activities with system stakeholders
Skills
- Associate degree in cybersecurity, information technology, computer science, information systems, business, communications, or a related field, or an additional two or more years of relevant experience in place of the degree requirement
- At least 10 years of relevant experience aligned to the responsibilities of this position
- Extensive experience conducting independent security control assessments
- Expert knowledge of federal RMF and security control assessment practices
- Experience developing Security Assessment Plans and Security Assessment Reports
- Strong technical testing, risk analysis, and documentation skills
- CompTIA Security+ certification
- GIAC Information Security Professional (GISP) certification
- Ability to obtain and maintain the required federal background investigation, Public Trust determination, or security clearance associated with the position
- Ability to remain in a stationary position for extended periods while working at a computer
- Ability to communicate effectively through virtual and in-person meetings
- Ability to perform duties in an office, remote, or hybrid environment based on program requirements
- Experience serving as a Security Control Assessor or supporting an independent assessment organization
- Experience assessing Low- and Moderate-impact federal systems
- Experience with HHS, NIH, or another federal civilian agency
Benefits
- Primarily remote work arrangement
- Dependent upon position: Health Insurance
- Dependent upon position: Life Insurance
- Dependent upon position: Paid Time Off
- Dependent upon position: Holiday Pay
- Dependent upon position: Short-term and long-term Disability
- Dependent upon position: Retirement and Savings
- Dependent upon position: Learning and Development opportunities
- Dependent upon position: Wellness programs
- Dependent upon position: Other optional benefit elections
Company Overview