Assoc. Cybersecurity Analyst

Spectraforce Technologies
United States, Florida, Jacksonville
Jan 24, 2025
Job Title: Assoc. Cybersecurity Analyst Location: 100% Remote Duration: 6 months with possible extension Note: Knowledge of NIST 800.53 and HHS/CMS Acceptable Risk Safeguards (Previous Governance Audit experience ideal) Job Summary The Associate Cybersecurity Risk Analyst aids in the development and implementation of a comprehensive information security program including defining security policies, processes, and standards. The Associate Cybersecurity Analyst performs risk assessments and define processes and standards to ensure that risk is managed efficiently and effectively. Essential Functions: The essential functions listed represent the major duties of this role, additional duties may be assigned. Aids in the management of the Cyber Risk Management Lifecycle which includes the processing, analysis, and documentation of risks, findings, exceptions, and corrective action plans. Serves as a liaison with IT and business area partners to identify, understand, document, and advise on security requirements, impacts and risks. Analyzes, proposes, and implements solutions concerning residual risk, vulnerabilities, and other security exposures. Participates on IT/Security projects to ensure security issues are addressed through the project life cycle. Participates in initiatives to identify, select, and implement technical and security controls. Develop risk management policies, standards, and procedures. Advises on service level agreements and works to ensure that security controls are managed and maintained. Researches, evaluates, and recommends cybersecurity risk solutions including development of business cases for security investments. Serves as a liaison on audit-related initiatives managing relationships, collection of data, progression tracking, assessment, and remedial activities. Supports security architecture in the identification and analysis of project risk. Required Work Experience: 3+ years related work experience Required Education: High school diploma or GED Additional Required Qualifications: Knowledge of information security principles, including risk assessment and management, threat and vulnerability management, incident response and identity and access management Knowledge of operating systems and security applications, as well as a working knowledge of basic network protocols and tools. Abilities including knowledge share, conflict resolution, facilitation of open discussions, fairness and displaying appropriate levels of assertiveness. Ability to work under stress in emergencies with flexibility to handle multiple high-pressure situations simultaneously. Ability to communicate highly complex technical information clearly and articulately for all levels and audiences. Ability to manage tasks independently and take ownership of responsibilities. Ability to learn from mistakes and apply constructive feedback to improve performance. Strong customer focus with ability to manage customer expectations and experience and build long-term relationships. Strong team-oriented interpersonal skills with the ability to interface with a broad range of people and roles including vendors and IT-business personnel. Ability to adapt to a rapidly changing environment. High critical thinking skills to evaluate alternatives and present solutions that are consistent with business objectives and strategy Preferred Education:* Bachelor's degree Additional Preferred Qualifications: Security+ or GSEC certification or ability to obtain certifications within 180 days of hire date Self-Essential Competencies: Collaborates Communicates Effectively Manages Complexity Pursues Self Development Solves Problems Position is offered by a no fee agency.