Network Security Analyst II – GRC, Risk & System Security Specialist

Austin, TX - USA

Monthly Salary: Not Disclosed

Posted on: 3 hours ago

Vacancies: 1 Vacancy

Job Summary

Job Title: Network Security Analyst II GRC Risk & System Security Specialist

Location: Austin TX (Onsite- Local candidates only)

We are currently seeking candidates who meet the following qualification

Develop update and maintain comprehensive System Security Plans (SSPs) for agency applications and infrastructure systems
Collaborate with Information Owners (IO) Information Custodians (IC) and technical teams to gather and validate security control implementation evidence
Ensure alignment of SSPs and security controls with NIST SP 800-53 NIST Risk Management Framework (RMF)
Plan and conduct Security Assessments (SA) to validate effectiveness of technical administrative and operational controls
Review control evidence document findings and track remediation activities through closure
Facilitate Risk Assessment (RA) workshops to identify threats vulnerabilities likelihood and business impact
Document risks mitigation strategies and risk-based decisions within RSA Archer GRC
Maintain risk records POA&Ms compliance artifacts and assessment documentation in RSA Archer
Support Authority to Operate (ATO) processes and continuous monitoring activities
Prepare audit-ready documentation packages and provide oversight support during internal and external audits
Generate executive-level security posture reports and compliance metrics
Serve as liaison between program areas technical teams and CISO leadership
Provide guidance and training related to SSPs risk assessments and security compliance processes
Support enterprise cybersecurity compliance audit readiness and system authorization programs
Ensure adherence to laws and regulations related to national security and foreign ownership restrictions
Protect organizational assets from cyber threats unauthorized access and emerging vulnerabilities
Monitor assess and recommend remediation strategies for identified security gaps
Work independently on complex cybersecurity assignments with a high degree of creativity and professional judgment
Support occasional after-hours activities during audits or major security assessments

Experience in cybersecurity GRC system security planning or information assurance
Hands-on experience developing SSPs conducting Security Assessments and facilitating Risk Assessments
Strong working knowledge of NIST SP 800-53 and NIST Risk Management Framework
Experience working with GRC platforms (RSA Archer preferred)
Experience collaborating with Information Owners and Custodians
Strong technical writing documentation and reporting skills
Ability to work independently under limited supervision

Certification (At Least One)

CompTIA Security
GIAC GSEC
CAP
CISSP

Preferred Qualifications

Experience supporting state or federal government cybersecurity programs
Familiarity with Security Control Standards
Experience supporting ATO and continuous monitoring programs
CRISC or CISA certification

If you meet these qualifications please submit your application via link provided in Linkedin
Kindly do not call the general line to submit your application.