Information Security Analyst

Radiant Digital • Contract • Remote (United States, US) • 3m ago

Position: Information Security Analyst

Location: 100% Remote - Bismarck, ND

Duration: 12 Months

Qualifications

Bachelor's degree in Computer Science, Information Security, or a related field. Advanced degree or relevant certifications (e.g., CISSP, CISM, CRISC, CISA) preferred.
Proven experience (5+ years) in system security administration, risk management, and compliance, preferably in a federal or government contracting environment.
In-depth knowledge of federal cybersecurity regulations and standards, including FISMA, NIST SP 800 series, and FedRAMP.
Hands-on experience with security technologies and tools, such as firewalls, intrusion detection/prevention systems, antivirus software, encryption, and SIEM solutions.
Strong analytical skills and the ability to assess complex security risks, analyze security requirements, and develop effective mitigation strategies.
Excellent communication and interpersonal skills.
Demonstrated ability to work independently, prioritize tasks, and manage multiple projects simultaneously in a fast-paced environment.
U.S. citizenship and eligibility for obtaining a security clearance (e.g., Secret or Top Secret) may be required for specific projects.

Responsibilities

Develop and implement comprehensive security policies, procedures, and controls to protect project data and systems from unauthorized access, disclosure, alteration, and destruction.
Serve as the primary point of contact for all security-related matters, collaborating with project stakeholders, system administrators, and cybersecurity experts.
Conduct regular risk assessments and security audits to identify vulnerabilities, assess the effectiveness of existing security controls, and recommend corrective actions.
Monitor security events and incidents, investigate security breaches, and coordinate response efforts to mitigate risks/minimize impact.
Manage access control mechanisms, including user authentication, authorization, and privilege management, ensuring compliance with federal regulations and project requirements.
Implement and maintain security solutions, such as intrusion detection/prevention systems (IDS/IPS), endpoint protection, encryption technologies, and security information and event management (SIEM) tools.
Develop and deliver security awareness training and educational programs to project staff, promoting a security awareness and compliance culture.
Stay informed about emerging cybersecurity threats, vulnerabilities, and industry best practices, proactively recommending and implementing security enhancements as needed.
Collaborate with external auditors and regulatory agencies to facilitate security assessments, certifications, and compliance audits.
Prepare and maintain documentation, including security policies, procedures, incident response plans, and risk management reports.