Beacon Systems, Inc, delivers Program Management, Science, Engineering, and Technology Solutions to Federal, Commercial State, and Local Agencies. We are a subsidiary of Radiant Digital Services. We have a vast portfolio of clients across the country. Our Technology support to many DoD Agencies, NASA, Voice of America, FDA, and State Agencies such as State of FL, RI, MS, ND, VA, and WV extends our delivery of solutions worldwide.
Responsibilities
System Security Planning (SSP)
• Develop, update, and maintain System Security Plans for HHSC applications and systems.
• Work with program teams, Information Owners, and Custodians to gather control implementation evidence.
• Ensure System Security Plans align with NIST, DIR, and HHSC CISO Office standards.
Security Assessments (SA)
• Plan and conduct Security Assessments to validate implementation and effectiveness of security controls.
• Review technical, administrative, and operational evidence.
• Document assessment results and track remediation activities.
Risk Assessments (RA)
• Facilitate Risk Assessment workshops with Information Owners and Custodians.
• Identify threats, vulnerabilities, likelihood, and impact.
• Document risks, mitigation plans, and Risk-Based Decisions in RSA Archer.
GRC & Compliance Operations
• Maintain security artifacts, risks, and remediation plans in RSA Archer GRC.
• Support system authorization (ATO) activities and continuous monitoring.
• Prepare audit and oversight evidence.
• Produce leadership reports and security posture metrics.
Stakeholder Engagement
• Serve as liaison between program areas, technical teams, and CISO Office leadership.
• Provide guidance and training on System Security Plans, Security Assessments, and Risk Assessment processes.
Deliverables
• Completed and updated System Security Plans (SSPs)
• Documented Security Assessment reports and findings
• Completed Risk Assessments and Risk-Based Decisions
• RSA Archer risk and compliance records
• Remediation tracking and status reports
• Audit-ready security documentation packages
Minimum Qualifications:
• 4+ years of experience in cybersecurity GRC, system security planning, or information assurance.
• 4 Hands-on experience developing System Security Plans (SSPs), conducting Security Assessments, and facilitating Risk Assessments.
• 4 Knowledge of NIST SP 800-53 and NIST NIST Risk Management Framework.
• 4 Experience using GRC platforms (RSA Archer preferred).
• 4 Experience working with Information Owners and Custodians.
• 4 Strong technical writing and documentation skills.
• 4 Ability to work independently on complex assignments.
Required Certifications
At least one of:
• CompTIA Security+
• GIAC GSEC
• CAP
• CISSP
Preferred Qualifications
• 3 Experience in state or federal government cybersecurity programs.
• 3 Familiarity with DIR Security Control Standards.
• 2 Experience supporting ATO and continuous monitoring.
• 1 CRISC or CISA certification.
Compensation for roles at Beacon Systems Inc depending on a wide array of factors including, but not limited to, the specific office location, role, skill set, and level of experience. As required by applicable law, BeaconGov provides reasonable range of compensation for this role.
Beacon Systems is dedicated to fostering an inclusive and diverse work environment. We ensure equal employment opportunities for all individuals, regardless of their race, color, religion, gender, national origin, age, disability, or any other legally protected characteristic. Our commitment to being an equal-opportunity employer extends across all aspects of employment, from recruitment and hiring to promotions and benefits. We firmly believe in treating all employees and applicants fairly, based on their qualifications, skills, and performance.
Never miss an opportunity! Create an alert based on the job you applied for.