ICF
Senior Cyber Security Business Analyst (Remote)
ICF, Reston, Virginia, United States, 22090
Description
We are open to supporting 100% remote work anywhere within the U.S.
ICF’s Digital Modernization Division is a rapidly growing, entrepreneurial, technology department, seeking a Senior Cyber Security Business Analyst to support upcoming needs with our federal customers.
ICF is a purpose-driven company with a strong culture and underlying values that prize diversity, opportunity, equality, and respect. Our core values include Embracing Differences, and we seek candidates who are passionate about building a culture that encourages, embraces, and hires dimensions of differences.
Our Digital Modernization Division is an information technology and management consulting department that offers integrated, strategic solutions to its public and private-sector clients. ICF has the expertise, agility, and commitment to design, build, and operate high-performance IT engines to support all aspects of our client’s business.
We are open to supporting 100% remote work anywhere within the U.S., candidates in the Washington DC metro area are preferred.
The Team:
The Application Development Sustainment Services (ADSS) team supports Treasury Enterprise Application (EA) platform systems that are critical to the success of the Department of Treasury IT mission. The ADSS program provides contractor support for both Operations and Maintenance (O&M) activities and Development and Modernization (DM&E) efforts.
Role:
We are seeking a Senior Cyber Security Business Analyst to assist our customers’ business needs with low code system security oversight, policy guidance, audits, and integration and development activities related to ServiceNow and Salesforce Platforms. This role will be a key member of the Cyber Security team, monitoring and supporting the Cyber priorities, associated processes, and external system integration. You will be responsible for developing a strong understanding of the business needs of the stakeholders and how the low-code applications will support those needs. This analyst role will partner with development and IT partners to document and secure the IT low-code platforms.
The Senior Cyber Security Business Analyst serves as a translator between technical teams and the cyber security policies and security community to collect, clarify, analyze, and translate requirements into documentation and provide guidance on which applications and solutions require POA&M action resolution. This position is within the context of low-code Agile teams employing a Scrum development framework.
This position will be working directly with security stakeholders, serving in both Business Analyst and Project Manager roles as a liaison between the low code platform development teams and the security community, and must be able to communicate effectively via phone and web conferencing as many of the stakeholders work remotely.
In addition to supporting all phases of the project, this position will also be responsible for authoring content and peer-reviewing a wide array of documents, including System Security and Surveillance Plans.
Detailed list of responsibilities includes:
Responsibilities:
Ensure the system is operated, used, maintained, and disposed of IAW documented security policies and procedures. Ensuring security controls are in place and operating as intended.
Advise System Owner of any security risks and obtain assistance from the ISSM, if necessary, in assessing the risk;
Assist system owners in completing and maintaining all System A&A documentation
Ensure System users have the required background investigations, the required authorization, and need-to-know, and are familiar with internal security practices before access is granted to the system.
Promote information security awareness; including privacy awareness
Identify, report, and respond to information security incidents
Review system role assignments to validate compliance with principles of least privilege.
Review audit/log reports for potential security issues.
Evaluate Security Advisory Alerts (SAA) and known vulnerabilities to ascertain if additional safeguards are needed; ensure systems are patched and securely configured, as appropriate.
Support the security measures and goals established by the Agency CISO.
Comply with the Agency security awareness training requirements for individuals with significant security responsibilities.
Assist in the identification, implementation, and assessment of a system’s security controls, including common controls.
Coordinate and maintain an accurate inventory of the information system
Work with the system owner and ISSM to develop, implement, and manage System Plan of Action and Milestones (POA&Ms)
Coordinate the scheduling, demonstration, and submission of supporting artifacts in relation to financial audits
Qualifications:
Bachelor’s Degree
5+ years of recent experience working in an IT organization as a security analyst
2+ years of experience with low-code platforms such as ServiceNow and Salesforce
Security + certification
5+ years of experience managing an organization’s security risk
US Citizenship required due to federal contract requirements
Must be able to obtain Public Trust clearance.
1+ year of experience with NIST standards and FEDRAMP process
Job Location: This position requires that the job be performed in the United States. If you accept this position, you should note that ICF does monitor employee work locations and blocks access from foreign locations/foreign IP addresses, and also prohibits personal VPN connections.
Preferred Qualifications:
CISSP certified
A+ certified
Solid understanding of various Security Concepts (e.g., A&A packages, SAA, POA&Ms, etc.); knowledge of security data calls.
Skilled at analyzing existing system documentation to summarize existing system functionality as it relates to the project at hand
Good understanding of basic system technologies as they relate to the project deliverables
Ability to maintain System POA&Ms and drive activity
Experience with regular security audits of logs and user access privileges
Ability to provide security assistance/guidance and troubleshooting by effectively responding to inquiries
Experience thriving in ambiguous software development environments
Ability to work well under constantly changing deadlines and priorities
Experience with Appian, or similar BPM software
Excellent oral and written communication skills
#SENW22
#DMX24
#YRU22
#Li-CC1
Working at ICF
ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.
We can only solve the world's toughest challenges by building an inclusive workplace that allows everyone to thrive. We are an equal opportunity employer, committed to hiring regardless of any protected characteristic, such as race, ethnicity, national origin, color, sex, gender identity/expression, sexual orientation, religion, age, disability status, or military/veteran status. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO & AA policy (https://www.icf.com/legal/equal-employment-opportunity) .
Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation please email Candidateaccommodation@icf.com and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. Read more here: Requesting an Accommodation for the ICF interview process (http://careers.icf.com/us/en/accommodations) .
Read more about workplace discrimination rights , the Pay Transparency Statement (https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf) , or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act. (https://www.icf.com/legal/equal-employment-opportunity)
Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.
The pay range for this position based on full-time employment is:
$92,986.00 - $158,076.00
Nationwide Remote Office (US99)
We are open to supporting 100% remote work anywhere within the U.S.
ICF’s Digital Modernization Division is a rapidly growing, entrepreneurial, technology department, seeking a Senior Cyber Security Business Analyst to support upcoming needs with our federal customers.
ICF is a purpose-driven company with a strong culture and underlying values that prize diversity, opportunity, equality, and respect. Our core values include Embracing Differences, and we seek candidates who are passionate about building a culture that encourages, embraces, and hires dimensions of differences.
Our Digital Modernization Division is an information technology and management consulting department that offers integrated, strategic solutions to its public and private-sector clients. ICF has the expertise, agility, and commitment to design, build, and operate high-performance IT engines to support all aspects of our client’s business.
We are open to supporting 100% remote work anywhere within the U.S., candidates in the Washington DC metro area are preferred.
The Team:
The Application Development Sustainment Services (ADSS) team supports Treasury Enterprise Application (EA) platform systems that are critical to the success of the Department of Treasury IT mission. The ADSS program provides contractor support for both Operations and Maintenance (O&M) activities and Development and Modernization (DM&E) efforts.
Role:
We are seeking a Senior Cyber Security Business Analyst to assist our customers’ business needs with low code system security oversight, policy guidance, audits, and integration and development activities related to ServiceNow and Salesforce Platforms. This role will be a key member of the Cyber Security team, monitoring and supporting the Cyber priorities, associated processes, and external system integration. You will be responsible for developing a strong understanding of the business needs of the stakeholders and how the low-code applications will support those needs. This analyst role will partner with development and IT partners to document and secure the IT low-code platforms.
The Senior Cyber Security Business Analyst serves as a translator between technical teams and the cyber security policies and security community to collect, clarify, analyze, and translate requirements into documentation and provide guidance on which applications and solutions require POA&M action resolution. This position is within the context of low-code Agile teams employing a Scrum development framework.
This position will be working directly with security stakeholders, serving in both Business Analyst and Project Manager roles as a liaison between the low code platform development teams and the security community, and must be able to communicate effectively via phone and web conferencing as many of the stakeholders work remotely.
In addition to supporting all phases of the project, this position will also be responsible for authoring content and peer-reviewing a wide array of documents, including System Security and Surveillance Plans.
Detailed list of responsibilities includes:
Responsibilities:
Ensure the system is operated, used, maintained, and disposed of IAW documented security policies and procedures. Ensuring security controls are in place and operating as intended.
Advise System Owner of any security risks and obtain assistance from the ISSM, if necessary, in assessing the risk;
Assist system owners in completing and maintaining all System A&A documentation
Ensure System users have the required background investigations, the required authorization, and need-to-know, and are familiar with internal security practices before access is granted to the system.
Promote information security awareness; including privacy awareness
Identify, report, and respond to information security incidents
Review system role assignments to validate compliance with principles of least privilege.
Review audit/log reports for potential security issues.
Evaluate Security Advisory Alerts (SAA) and known vulnerabilities to ascertain if additional safeguards are needed; ensure systems are patched and securely configured, as appropriate.
Support the security measures and goals established by the Agency CISO.
Comply with the Agency security awareness training requirements for individuals with significant security responsibilities.
Assist in the identification, implementation, and assessment of a system’s security controls, including common controls.
Coordinate and maintain an accurate inventory of the information system
Work with the system owner and ISSM to develop, implement, and manage System Plan of Action and Milestones (POA&Ms)
Coordinate the scheduling, demonstration, and submission of supporting artifacts in relation to financial audits
Qualifications:
Bachelor’s Degree
5+ years of recent experience working in an IT organization as a security analyst
2+ years of experience with low-code platforms such as ServiceNow and Salesforce
Security + certification
5+ years of experience managing an organization’s security risk
US Citizenship required due to federal contract requirements
Must be able to obtain Public Trust clearance.
1+ year of experience with NIST standards and FEDRAMP process
Job Location: This position requires that the job be performed in the United States. If you accept this position, you should note that ICF does monitor employee work locations and blocks access from foreign locations/foreign IP addresses, and also prohibits personal VPN connections.
Preferred Qualifications:
CISSP certified
A+ certified
Solid understanding of various Security Concepts (e.g., A&A packages, SAA, POA&Ms, etc.); knowledge of security data calls.
Skilled at analyzing existing system documentation to summarize existing system functionality as it relates to the project at hand
Good understanding of basic system technologies as they relate to the project deliverables
Ability to maintain System POA&Ms and drive activity
Experience with regular security audits of logs and user access privileges
Ability to provide security assistance/guidance and troubleshooting by effectively responding to inquiries
Experience thriving in ambiguous software development environments
Ability to work well under constantly changing deadlines and priorities
Experience with Appian, or similar BPM software
Excellent oral and written communication skills
#SENW22
#DMX24
#YRU22
#Li-CC1
Working at ICF
ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.
We can only solve the world's toughest challenges by building an inclusive workplace that allows everyone to thrive. We are an equal opportunity employer, committed to hiring regardless of any protected characteristic, such as race, ethnicity, national origin, color, sex, gender identity/expression, sexual orientation, religion, age, disability status, or military/veteran status. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO & AA policy (https://www.icf.com/legal/equal-employment-opportunity) .
Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation please email Candidateaccommodation@icf.com and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. Read more here: Requesting an Accommodation for the ICF interview process (http://careers.icf.com/us/en/accommodations) .
Read more about workplace discrimination rights , the Pay Transparency Statement (https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf) , or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act. (https://www.icf.com/legal/equal-employment-opportunity)
Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.
The pay range for this position based on full-time employment is:
$92,986.00 - $158,076.00
Nationwide Remote Office (US99)