Cyber Compliance Reporting

The Opportunity:

As a Cyber Compliance Reporting Analyst youwill be responsible for drafting and managing technical orders tracking compliance and analyzing cybersecurity vulnerabilitiessupporting the US Coast Guard. This role requires strong writing and communication skills proficiency in Microsoft Office tools including Power BI and a deep understanding of DoD terminology and cybersecurity frameworks such as NIST and RMF.Youmust possess an active DoD Secret Clearance be DOD 8570 IAT II certified and have experience with tools like Tenable Security Center Tanium and Microsoft Defender Endpoint. Thisposition involves coordinating cyber activities with external and internal entities reviewing proposed solutions for compliance with federal and defense regulations and assisting in the creation of white papers for course of action analysis.

Specific Areas of Responsibility:

• Solid writing and communications skills; ability to write Operational Orders Cyber Task Ordersand other tasking mechanismsrelated to Information Technology.

• Strong Microsoft Office skills to include WordExcelPowerPointSharePoint includingPowerBi.

• Strong knowledge of Department of Defense (DoD / DoW) terminology acronyms and verbiagerelated to Cybersecurity Information Technology andother Cyber related events.

• Track verifyand enumerate metric related to inbound and outbound TASKORDs CTO EXORDs and other tasking mechanisms from DoD and DHS.

• Familiarity withPlans of Action and Milestones (POA&M)for securing IT vulnerabilities exploits and weaknesses.

• Examinedatasets and use investigative techniques to determinewhat systems are in compliance with or deviating from the known standard.

• Filtera dataset and conduct analysisin order toprovide theCustomerwithan explanation based on potential scenarios proposedby the Government or the Analyst

• Analyzedata contained within multiple tools (e.g.Tanium ACAS etc.) todetermine the potential attack surface of a vulnerability based on anunderstanding of the exploitability of the vulnerability and active andpassive defenses used by the network.

• Differentiatebetween risk mitigation and risk remediation the processes for each andhow to manage and track both.

• Maintain datasets related to information systems and related data used by theorganization.

• Understandand communicate the difference between a threat vulnerability and a risk.

• Assist in the creation and publication of technical orders to service customers; track the compliance and status of orders through their lifecycle in an Orders Management program.

• Trackand acknowledge the receipt of vulnerabilitiesthrough a Orders Management program; analyze and reportthe compliance of vulnerabilities on affected assets

• DisseminateIAVM/ISVM notices and track compliance as directed by USCYBERCOM orCGCYBER.

• Assist with the coordination of and implementation of the IA program with aspecific emphasis on the reporting tracking and compliance of KPIs.

• Responsiblefor drafting management level reports detailing vulnerabilities releasedcompliant and non-compliantas well as trending informationacross the enterprise.

• Review proposed solutions to ensure they meet Federal and Defense information technology regulations.

• Assist in researching product information to developing white papers for course of action analysis.

• Coordinate cyber activities with both external entities (DOD DHS and Commercial Industry) as well as internal USCG entities.

Qualifications:

Required:

• Must have active DoDSecretClearance.

• Education: BA/BS or equivalent years of relevant experience.

• Relevant Years of Experience:7

• Must be DOD 8570 IAT II certified.

• Candidate must have a strong working knowledge of MS tools such asWordExcelPowerPointSharePoint andPowerBi.

• Experience withTenable Security CenterTanium Microsoft Defender Endpoint.

• A working knowledge and understanding of National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) network security technologies procedures and operational constructs.

Desired:

• Masters degree.

• 4 years of military experience.