SLED Security Analyst, Information Security

🔥 28 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Presidio

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Presidio is a global IT solutions and services firm that designs, implements, and manages agile, secure digital platforms to help enterprise customers accelerate digital transformation. Its offerings include cloud migration and modern platforms, managed services, AI and data analytics (including agentic and private AI), cybersecurity, networking, collaboration, and lifecycle/finops and procurement/consumption financing. Presidio serves regulated and enterprise sectors such as healthcare, media & entertainment, finance, public sector and utilities.

📋 Description

• This position is responsible for managing and maintaining all documentation, governance activities, compliance initiatives, and operational processes necessary to attain and maintain security authorizations and certifications supporting State, Local, Education, and Government (SLED) customers. • Leads the development and maintenance of security architecture, governance frameworks, policies, standards, procedures, and control implementation guidance. • Supports security authorization initiatives aligned to NIST SP 800-53 Moderate, FedRAMP Moderate, GovRAMP, StateRAMP, CJIS Security Policy, HIPAA, NIST SP 800-171, and related regulatory frameworks. • Assembles, develops, maintains, and updates System Security Plans (SSP), supporting documentation, and authorization package artifacts. • Maps implemented security control requirements to NIST SP 800-53 Moderate baselines, CJIS Security Policy, FedRAMP, GovRAMP, and other applicable control overlays. • Documents implemented, inherited, hybrid, and customer-responsibility controls within authorization packages. • Collects, validates, organizes, and maintains technical, administrative, and procedural evidence supporting compliance and assessment activities. • Establishes and maintains centralized control evidence repositories utilizing governance and compliance management platforms such as Vanta or equivalent technologies. • Supports independent assessors, auditors, regulators, customers, and internal stakeholders during assessments, walkthroughs, interviews, demonstrations, and evidence reviews. • Develops, maintains, and tracks Plan of Action and Milestones (POA&M) documentation, remediation activities, corrective action plans, and risk mitigation efforts. • Tracks security findings, compliance gaps, remediation activities, risk acceptances, and corrective action plans through closure.

🎯 Requirements

• Associate degree (preferably in Computer Science, Cybersecurity, Information Systems, Information Security, or related field from an accredited college or university) or the equivalent work experience and/or military experience • 3+ years of experience supporting information security, governance, risk, compliance, audit, or authorization programs. • One or more security certifications such as Security+, CISSP, CISA, CGRC (CAP), CRISC, CASP+, CCSP, GIAC, CSA, or equivalent. • Experience supporting NIST SP 800-53 Moderate, FedRAMP, GovRAMP, StateRAMP, CJIS Security Policy, NIST Cybersecurity Framework (CSF), NIST SP 800-171, HIPAA, or other SLED-related compliance programs. • Experience developing and maintaining System Security Plans (SSP), POA&M documentation, security policies, standards, procedures, and authorization artifacts. • Intermediate to advanced technical writing skills with demonstrated experience producing compliance and governance documentation. • Experience supporting independent assessments, audits, reviews, and authorization activities. • Experience with governance, risk, and compliance platforms including Vanta, Drata, Archer, ServiceNow, or similar technologies. • Understanding of technical concepts and security technologies including cloud computing, identity and access management, VPNs, firewalls, web application firewalls, vulnerability management, endpoint protection, logging, monitoring, and network security controls. • Skills in project prioritization, issue management, remediation tracking, risk assessment, and problem resolution. • Exceptional writing skills combined with strong presentation and communication skills. • Expert analytical thinking skills, including the ability to summarize information and clearly identify risks, findings, trends, and remediation requirements. • Experience creating, generating, maintaining, and reporting on compliance metrics, audit evidence, control documentation, and security reporting. • Experience utilizing artificial intelligence tools and technologies to improve documentation, compliance operations, and security processes. • Ability to manage multiple projects, priorities, audits, and compliance initiatives simultaneously. • Ability to communicate and translate security risks to technical and non-technical audiences. • Ability to analyze complex security and compliance issues and develop practical solutions.

🏖️ Benefits

• Health insurance • 401(k) matching • Flexible working hours • Paid time off • Remote work options