GRC Analyst

GRC Analyst DoD / DIA / Government Focus - Top Secret Clearance is Required Santa Monica, CA - Hybrid onsite 2-3 days per week Summary: The GRC Analyst is responsible for helping to provide compliance and oversight of all our Corporation's Authorization and Accreditation (A&A) requirements as it relates to our government business including but not limited to DIA, DoD, DCSA, etc. Additionally, the position manages the Sensitive Compartmentalized Information (SCI) and Special Access Program (SAP) Information Systems (IS) to ensure that all classified IS remain accredited by partnering with Security, IT and other teams. Responsibilities: Implements, monitors, and maintains the ICDs, our Security Manual and procedures, DoD and other applicable government sponsor regulations for SCI/SAP and collateral systems Enforces corporate policies to support ICD, and other CI standards Enforces compliance with current Security Technical Implementation Guides (STIGs) for all applicable systems Interfaces with and supports clients in the operation and security of the classified systems Assist the ISSM in establishing, communicating, and improving the collateral and SCI/SAP Information Systems (IS) Security Program Responsible for the preparation and sustainment for internal self-inspections, DIA and other government inspections Assesses changes by performing periodic self-inspections, tests and reviews of the classified IS program to ensure that systems are operating as authorized/accredited and that conditions have not changed Participates in the planning, installation, implementation, upgrade, problem determination and resolution involving software programs, operating systems, computers, printers, scanners, etc. for collateral and SCI/SAP systems. Provides budget requirements to the ISSM for the sustainment of the collateral SCI/SAP systems. Ensures protocols are followed for the investigation(s) and resolution of security incidents Performs weekly audits and ensures administrative inquiries/investigations into anomalies found during audit trail analysis are reported to the ISSM for follow on actions Collaborates with the system and network administrators to ensure audit features are configured and enabled correctly Develops and implements the System Security Plans (SSP) and addendums for the facility Performs other duties as assigned Requirements: Must hold and maintain a Top-Secret security clearance and SCI/program eligibility 4 years' experience in Information Technology, preferably in a classified environment Must have and maintain a DoD 8570.01-M - IAM level 1 certification (Security, GSLC, CISM, or CISSP) Possesses working knowledge of the DoD, DISA, ICDs and associated IC security regulations, policies, STIGs and laws Nice to haves: Knowledge of DIA and other federal government network security processes and procedures Familiarity with encryption technologies, forensics, penetration and vulnerability analysis of various security technologies and information technology security research