Security Analyst

< class="PDq2pG_selectionAnchorContainer" data-section-id="tn77p3" data-start="0" data-end="49">Security Analyst < class="PDq2pG_selectionAnchorContainer" data-section-id="tn77p3" data-start="0" data-end="49">Role: Level III Security Professional
Location: Wisconsin
Work Arrangement: Remote within Wisconsin, with onsite requirements

Position Overview

We is seeking a Level III Security Professional with strong experience in information security, vulnerability management, compliance, documentation, and stakeholder communication.

Key Responsibilities

• Support vulnerability management activities across DMS and its vendors.
• Track vulnerabilities and support timely remediation and resolution.
• Monitor Plans of Action & Milestones (POA&M) related to vulnerabilities and compliance gaps.
• Support state and federal security regulations, policies, procedures, standards, and guidelines.
• Develop and maintain System Security & Privacy Plans (SSPP).
• Support security audits, assessments, incident response, and regulatory activities.
• Gather and maintain compliance evidence and artifacts.
• Coordinate with auditors, vendors, technical teams, security teams, and business stakeholders.
• Develop corrective action plans and monitor remediation through closure.
• Conduct/support security gap analysis and compliance initiatives.
• Help transition DHS compliance requirements from MARS-E to ARC-AMPE.
• Support software reviews, cloud brokerage reviews, and AI use-case reviews.
• Prepare security documentation, status reports, briefs, proposals, and concept papers.

Required Skills / Experience

• Strong knowledge of Information Security / Cybersecurity concepts
• Experience with Vulnerability Management
• Strong security documentation and compliance experience
• Experience with audit, assessment, regulatory, or security compliance activities
• Knowledge of NIST or another recognized security framework
• Experience creating or maintaining System Security & Privacy Plans (SSPP)
• Experience with POA&M / remediation tracking
• Strong stakeholder management and communication skills
• Ability to explain complex security concepts to non-technical audiences and executives
• Ability to manage multiple priorities and work cross-functionally
• Strong attention to detail and organizational skills
• Experience working with vendors and technical/business teams

Certification Requirement

A federally recognized (ANSI) information security certification must be obtained within 6 months of the start date and maintained throughout the position. DOD 8570 baseline certifications are used as the baseline when evaluating relevant certifications.

Candidate Location Requirement — Important

• Candidate MUST currently be a Wisconsin resident.
• No relocation is allowed.
• Candidate may work remotely up to 5 days per week.
• Candidate must be able to report onsite when required, including short-notice requests.
• Minimum onsite expectation is quarterly, but onsite visits may be more frequent depending on business needs.
• Remote-work arrangements will be discussed during the interview process.