Information Security Compliance Analyst (A&A, OT/ICS) - Hybrid

Macro Pros (Alluvial Concepts) is seeking an Information Security Compliance Analyst with strong Assessment & Authorization (A&A) experience and deep knowledge of NIST SP 800-53 Rev. 5. This is a long-term contract with the potential to convert to full-time with one of the top government integrators in the industry.

This is a hybrid role (2 days onsite in Bethesda, MD - flexible on days, 3 days remote).

Requirements:

• Must currently live in the Washington, DC metro area
• U.S. Citizen
• Ability to pass a standard background check and obtain a Public Trust clearance

What You'll Do:

• Analyze, review, monitor, and reassess the adequacy of information security controls across the organization
• Execute technical risk assessments using NIST SP 800-53 Rev. 5 across various systems, technologies, and environments
• Perform security audits, internal assessments, risk assessments, and support independent external audits
• Develop clear and effective methods for reporting assessment results to executive leadership
• Advise on and help establish sound information security processes and controls aligned with federal policies and SOPs
• Work closely with implementation teams to ensure solutions meet security requirements throughout the system lifecycle
• Verify that implemented controls are operating as designed
• Liaise with client A&A teams to support ATO efforts for new and existing systems
• Organize and conduct control assessments to validate ATO and audit readiness
• Partner with project managers, technical leads, and client stakeholders to assess, report, and remediate control gaps

Qualifications:

• 6 years supporting federal government systems and conducting A&As for ATOs
• Strong experience evaluating system security posture and providing risk-based findings and recommendations
• Demonstrated expertise with:
  • NIST SP 800-53 Rev. 5, 800-37, 800-82 Rev. 3
  • FIPS 199 & 200
  • FISMA, CNSS, FISCAM, GAO Green Book
• Experience helping system owners and stakeholders understand and implement federal security requirements
• Proven ability to assess control design and operational effectiveness
• OT / ICS experience preferred

Client Requirements:

• Bachelor's degree in Computer Science, Information Systems, Engineering, Business, or a related field
• CISA certification

#Dice

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.