SME Information Security Analyst
Not Disclosed•Full-TimeHybrid
location_on5301, Franconia Road, Silver Springs, Alexandria, Fairfax County, Virginia, 22310, United States
About the Role
GovCIO is seeking a highly experienced SME Information Security Analyst to serve as the principal cybersecurity authority for the U.S. Coast Guard (USCG). This critical technical role is dedicated to ensuring enterprise systems strictly adhere to federal, Department of Homeland Security (DHS), and military security standards throughout their entire lifecycle.
As a key member of the team, you will act as the bridge between technical engineering and high-level governance. Your work will focus on the comprehensive execution of the Risk Management Framework (RMF) to achieve and maintain Authority to Operate (ATO). You will be responsible for orchestrating end-to-end security control assessments, continuous monitoring strategies, and data governance workflows. This position requires close collaboration with Authorizing Officials, technical engineers, and stakeholders to resolve high-priority security vulnerabilities and mitigate architectural compliance risks during system modernization.
Location and Work Model
This position is based in Alexandria, VA, and operates as a hybrid role, allowing for a blend of on-site and remote work to support the dynamic needs of the USCG cybersecurity program.
Hiring Process
Candidates selected for this role must possess an active Secret clearance. The interview process will evaluate your technical mastery of the NIST Risk Management Framework and your ability to lead complex IT systems through the complete assessment and authorization lifecycle.
Equal Opportunity Employer
GovCIO is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
Work location
Work model: Hybrid
5301, Franconia Road, Silver Springs, Alexandria, Fairfax County, Virginia, 22310, United States
Alexandria, Virginia
Key Responsibilities
- check_circleLead execution of the Risk Management Framework to achieve and maintain Authority to Operate
- check_circleAuthor, review, and update security authorization packages in compliance with DHS 4300A policies
- check_circleConduct technical vulnerability reviews, risk assessments, and compliance audits on enterprise systems
- check_circleOversee data governance workflows, asset cataloging, and metadata management strategies
- check_circleCoordinate with Authorizing Officials and stakeholders to resolve high-priority security vulnerabilities
- check_circleIdentify architectural compliance risks during system modernization and design remediation strategies
- check_circleManage end-to-end security control assessments, continuous monitoring, and Plan of Action and Milestones
- check_circleDevelop and maintain cybersecurity documentation, system security plans, and incident response protocols
Requirements
- verifiedHigh School diploma with 10+ years experience
- verifiedDoD 8570 IAM Level II or III certification (e.g., CISSP, CISM)
- verifiedActive Secret clearance
- verifiedExperience applying DHS 4300A policies
- verifiedMastery of NIST RMF (SP 800-37) and NIST SP 800-53
- verifiedExperience leading IT systems through A&A lifecycle
Nice to Have
Prior experience supporting U.S. Coast Guard (USCG) or Department of Homeland Security (DHS) cybersecurity programs. Direct hands-on experience utilizing Collibra for data governance, data cataloging, and compliance tracking. Familiarity with automated compliance tools such as Xacta, Archer, or DHS-specific risk management repositories. Understanding of cloud security architectures (FedRAMP), modern network protocols, and hybrid enterprise environments.
Similar Job Opportunities
Skills, education and keywords
Skills: Cissp, Cism, Cap, Isc2 Certified In Cybersecurity And Infrastructure Security, DHS 4300a, Nist Risk Management Framework, Nist SP 800-37, Nist SP 800-53, Collibra, Xacta.
Education: High School with 10+ years or commensurate experience.
Frequently asked questions about SME Information Security Analyst at Salt Lake County
What does a SME Information Security Analyst at Salt Lake County do?expand_more
Day-to-day, the SME Information Security Analyst at Salt Lake County will lead execution of the risk management framework to achieve and maintain authority to operate; author, review, and update security authorization packages in compliance with dhs 4300a policies; conduct technical vulnerability reviews, risk assessments, and compliance audits on enterprise systems; and oversee data governance workflows, asset cataloging, and metadata management strategies.
What are the requirements for this SME Information Security Analyst role?expand_more
To qualify for the SME Information Security Analyst at Salt Lake County position, applicants should have: High School diploma with 10+ years experience; DoD 8570 IAM Level II or III certification (e.g., CISSP, CISM); Active Secret clearance; Experience applying DHS 4300A policies; Mastery of NIST RMF (SP 800-37) and NIST SP 800-53; and Experience leading IT systems through A&A lifecycle.
Where is the SME Information Security Analyst role at Salt Lake County located?expand_more
SME Information Security Analyst at Salt Lake County is based in 5301, Franconia Road, Silver Springs, Alexandria, Fairfax County, Virginia, 22310, United States. This is a hybrid role.
Is this SME Information Security Analyst job remote, hybrid, or on-site?expand_more
Salt Lake County has listed this SME Information Security Analyst role as hybrid.
How much experience is required for this SME Information Security Analyst role?expand_more
SME Information Security Analyst at Salt Lake County typically requires 10+ years of relevant experience at the lead level.
What skills do you need for the SME Information Security Analyst role at Salt Lake County?expand_more
Key skills for SME Information Security Analyst at Salt Lake County include Cissp; Cism; Cap; Isc2 Certified In Cybersecurity And Infrastructure Security; DHS 4300a; Nist Risk Management Framework; Nist SP 800-37; and Nist SP 800-53.
What education is required for SME Information Security Analyst at Salt Lake County?expand_more
Educational requirements for this role: High School with 10+ years or commensurate experience.
What category does the SME Information Security Analyst role belong to?expand_more
SME Information Security Analyst at Salt Lake County is part of the it job category on Recrutus.