Apply on Employer Site

Horizontal Talent · 6 hours ago

Sr. Controls Assessment Analyst

Washington, DC

Contract

Onsite

Senior Level

Horizontal Talent is seeking a Senior Controls Assessment Analyst to perform security and controls assessments, identify vulnerabilities, and recommend remediation strategies. The role involves collaboration with various stakeholders to manage security assessments and contribute to compliance and training efforts.

Business DevelopmentConsultingStaffing Agency

Responsibilities

Perform security and controls assessments

Identify and document vulnerabilities

Recommend remediation strategies to address security gaps

Collaborate with system owners, technical teams, vendors, and other stakeholders to conduct effective assessments

Manage and track Plans of Action and Milestones (POA&Ms)

Support security and privacy asset inventories

Contribute to training and awareness programs through metrics development and reporting

Qualification

Security assessmentsRisk managementCompliance programsNIST guidanceSOX controlsAnalytical skillsCommunication skillsProject management

Required

Experience conducting security assessments on federal systems

Experience assessing and mitigating risks associated with cybersecurity and data privacy

Understanding of relevant laws and regulations, such as NIST guidance and OMB memoranda. This includes knowledge of the NIST Risk Management Framework and familiarity with key publications like NIST SP 800-37, 800-53, and 800-171

Experience developing and implementing compliance programs, conducting risk assessments, and advising on compliance-related issues

Experience with the system Authorization to Operate process, including understanding the documentation required, the levels of approval needed, and the most effective ways to manage this process within a federal environment

Basic understanding of procurement processes and contract language requirements for federal mandates

Experience communicating complex regulatory and compliance information in a clear and concise manner

Experience tracking and reporting on training and awareness program performance, including calculating metrics to help measure the effectiveness of security, privacy, and social engineering training

Knowledge of SOX controls