Note: The job is a remote job and is open to candidates in USA. TECHNOVIZ LLC is an IT service provider offering technology and process-driven solutions across multiple industries. The Security Analyst III will integrate information security into program operations, serve as a liaison between business programs and security teams, and support audits, regulatory compliance, vulnerability management, incident response, and security documentation. The role requires cross-functional collaboration, stakeholder communication, risk assessment, and support for federal security compliance initiatives.
Responsibilities
- Integrate security into program operations
- Partner with organizational leaders to incorporate information security best-practices into technical and operational development
- Provide recommendations on how to improve the information security posture of programs and reduce risk
- Communicate risks in simple and comprehensible terms. Provide options to mitigate risk considering business impact
- Draft security requirements to be included into charters, scope documents, procurements
- Document and communicate analysis. Answer clarifying questions
- Escalate to ISS leadership if an acceptable level of risk cannot be achieved
- Act as a liaison between the program area and the Information Security Section
- Be a solutions-focused advocate
- Intake projects and other program initiatives and champion them through the appropriate ISS workstream
- Gather information as needed so that security team can perform thorough analysis
- Communicate workstream deliverables to the customer. Verify that the deliverable meets the customer need, follow-up on any clarifications
- Coordinate across ISS meeting their security-focused needs
- Coordinate with other BITS staff, Office of Legal Counsel, Bureau of Procurement and Contracting, and other program staff as needed in order to arrive to an outcome
- Support audit, assessment, incident response, and other regulatory activities
- Responsibility and authority will vary based on the use case and customer need
- Request and/or gather artifacts demonstrating compliance
- Schedule/facilitate communications between auditor/incident response, vendors, technical teams, and other program stakeholders
- In partnership with ISS, assess audit results and develop corrective action plans/plans of action and milestone
- Provide oversight to the resolution, test for compliance, and request authority to close
- Respond to regulatory inquiry and draft documents as needed
- Participate and support Program Integration related activities
- Back-up other security liaison roles
- Draft and deliver status reports
- Establish and maintain positive working relationships with stakeholders
- Establish and documents standard operations for job-related activities
- Support Vulnerability Management related to DMS and its vendors
- Foster transparency, accountability, and timely resolution of vulnerabilities with DMS and its vendors
- Support DMS and its vendors in adhering to state and federal regulations and Policies, Procedures, Standards and Guidelines (PPSGs) related to vulnerability management
- Draft and monitor plans of action and milestones for non-compliance
- Support DHS’s transition from the Center for Medicare and Medicaid Services (CMS) compliance requirements known as the Minimum Acceptable Risk Standards for Exchanges (MARS-E) to the new requirements known as Acceptable Risk Controls for ACA, Medicaid, and Partner Entities (ARC-AMPE)
- In partnership with Deloitte, DET, and ISS conduct GAP analysis to support transition, implementation, and maturation of DHS’s transition from MARS-E to ARC-AMPE
- Draft the ARC-AMPE System Security and Privacy Plan (SSPP) and keep it current
- Draft and monitor plans of action and milestones for non-compliance
- Support DHS in completing software reviews, cloud brokerage reviews, and AI Use Case reviews
- Other duties as assigned
- Back-up other security staff
- Write concept papers, proposals and briefs, and other documentation
Skills
- A federally recognized (ANSI) information security certification must be obtained within 6 months of the start date and maintained for this position
- Well qualified candidate will have broad knowledge of information security and experience application development, technical architecture, contracting, audit, or vendor management
- Be familiar with NIST or another recognized framework
- Demonstrated ability to solve complex problems, convey both oral and written instruction, and handle multiple task interruptions while providing services in a professional and courteous manner
- Demonstrated attention to detail and organizational skills
- Demonstrated ability to work effectively with customers to solve business challenges while balancing the need for confidentiality, integrity, and availability
- Demonstrated commitment to fostering a diverse working environment
- Demonstrated ability to work independently, as part of a team of peers, and also to support and contribute to a multidiscipline team environment
- DHS is seeking a Level III security professional with vulnerability management knowledge, strong documentation and compliance experience, and excellent stakeholder communication skills
- This role requires understanding security concepts, technical requirements, and operational processes, and communicating them effectively to non-security audiences
- Must be a WI resident
- NO relocation is allowed
- Can work remote up to five days, however, the candidate must come in if needed including on short notice
- At a minimum, the candidate will come in quarterly but could be more frequently as determined by business needs
Benefits
- Opportunity for advancement
- Training & development
- Can work remote up to five days, however, the candidate must come in if needed including on short notice. At a minimum, the candidate will come in quarterly but could be more frequently as determined by business needs.
Company Overview
Company H1B Sponsorship