SLED Security Analyst, Information Security

🔥 12 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Presidio

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

📦 Logistics

🤖 Artificial Intelligence

💰 Private equity on 2011-05

Consulting • Logistics • Artificial Intelligence

<Presidio> is a global technology services and solutions provider that designs, implements, and manages agile, secure digital platforms for enterprise customers. It helps organizations accelerate digital transformation through cloud migration and management, AI and data engineering, cybersecurity, networking and infrastructure, collaboration, and managed lifecycle services. Presidio also offers procurement, financing and consumption models, industry-specific solutions, and operational support for regulated and public sector clients.

📋 Description

• Managing and maintaining all documentation, governance activities, compliance initiatives, and operational processes necessary to attain and maintain security authorizations and certifications supporting State, Local, Education, and Government (SLED) customers. • Leads the development and maintenance of security architecture, governance frameworks, policies, standards, procedures, and control implementation guidance. • Supports security authorization initiatives aligned to NIST SP 800-53 Moderate, FedRAMP Moderate, GovRAMP, StateRAMP, CJIS Security Policy, HIPAA, NIST SP 800-171, and related regulatory frameworks. • Assembles, develops, maintains, and updates System Security Plans (SSP), supporting documentation, and authorization package artifacts. • Maps implemented security control requirements to NIST SP 800-53 Moderate baselines, CJIS Security Policy, FedRAMP, GovRAMP, and other applicable control overlays. • Collects, validates, organizes, and maintains technical, administrative, and procedural evidence supporting compliance and assessment activities. • Establishes and maintains centralized control evidence repositories utilizing governance and compliance management platforms such as Vanta or equivalent technologies. • Supports independent assessors, auditors, regulators, customers, and internal stakeholders during assessments, walkthroughs, interviews, demonstrations, and evidence reviews. • Develops, maintains, and tracks Plan of Action and Milestones (POA&M) documentation, remediation activities, corrective action plans, and risk mitigation efforts. • Tracks security findings, compliance gaps, remediation activities, risk acceptances, and corrective action plans through closure. • Evaluates existing information security policies, standards, procedures, and governance documentation and recommends improvements ensuring compliance with applicable frameworks. • Develops, maintains, and updates compliance-aligned policies, standards, procedures, and governance documentation supporting authorization readiness. • Defines roles, responsibilities, accountability requirements, and separation-of-duty controls supporting governance and compliance programs. • Establishes processes supporting risk management, control assessment, continuous monitoring, and control validation. • Develops and maintains Incident Response Plans (IRP), incident response procedures, and incident response playbooks aligned to regulatory reporting and notification requirements.

🎯 Requirements

• Associate degree (preferably in Computer Science, Cybersecurity, Information Systems, Information Security, or related field from an accredited college or university) or the equivalent work experience and/or military experience • 3+ years of experience supporting information security, governance, risk, compliance, audit, or authorization programs. • One or more security certifications such as Security+, CISSP, CISA, CGRC (CAP), CRISC, CASP+, CCSP, GIAC, CSA, or equivalent. • Experience supporting NIST SP 800-53 Moderate, FedRAMP, GovRAMP, StateRAMP, CJIS Security Policy, NIST Cybersecurity Framework (CSF), NIST SP 800-171, HIPAA, or other SLED-related compliance programs. • Experience developing and maintaining System Security Plans (SSP), POA&M documentation, security policies, standards, procedures, and authorization artifacts. • Intermediate to advanced technical writing skills with demonstrated experience producing compliance and governance documentation. • Experience supporting independent assessments, audits, reviews, and authorization activities. • Experience with governance, risk, and compliance platforms including Vanta, Drata, Archer, ServiceNow, or similar technologies. • Understanding of technical concepts and security technologies including cloud computing, identity and access management, VPNs, firewalls, web application firewalls, vulnerability management, endpoint protection, logging, monitoring, and network security controls. • Skills in project prioritization, issue management, remediation tracking, risk assessment, and problem resolution. • Exceptional writing skills combined with strong presentation and communication skills. • Expert analytical thinking skills, including the ability to summarize information and clearly identify risks, findings, trends, and remediation requirements. • Experience creating, generating, maintaining, and reporting on compliance metrics, audit evidence, control documentation, and security reporting. • Experience utilizing artificial intelligence tools and technologies to improve documentation, compliance operations, and security processes. • Ability to manage multiple projects, priorities, audits, and compliance initiatives simultaneously. • Ability to communicate and translate security risks to technical and non-technical audiences. • Ability to analyze complex security and compliance issues and develop practical solutions.

🏖️ Benefits

• Health insurance • 401(k) matching • Flexible working hours • Paid time off • Remote work options