Sr Analyst - ISO Security Governance
Not Disclosed•Full-TimeOn-site
location_on7282, Commonwealth Avenue, Jacksonville, Duval County, Florida, 32220, United States
About the Role
This position serves as a strategic partner in safeguarding Federal and Department of Defense (DoD) information systems. You will bridge the gap between complex security governance requirements and practical business implementation, ensuring that organizational policies align with rigorous federal standards. The role is critical for maintaining the security posture of shared services and supporting the Enterprise Information System Security Officer (ISSO) in navigating the evolving landscape of cybersecurity regulations.
In this capacity, you will act as a trusted advisor to information system owners, translating technical security mandates into understandable business terms. Your work will directly influence the development of doctrine, policies, and risk management strategies that protect sensitive data while enabling mission success. You will collaborate across Business Development, Capture Teams, and project ISSOs to ensure that both existing and prospective contracts meet the highest standards of governance and compliance.
The Day-to-Day
Your day will involve a dynamic mix of analysis, collaboration, and strategic planning. You will conduct complex risk assessments and evaluate emerging security technologies to recommend enhancements that strengthen the organization's defense. A significant portion of your time will be dedicated to mapping policies, standards, and procedures to multiple security frameworks, ensuring seamless alignment with Federal and DoD requirements.
You will support the ongoing management of governance activities, including vendor assessments, enterprise risk registers, and security awareness training. By leveraging Federal and DoD GRC tools, you will help maintain a robust Governance, Risk, and Compliance (GRC) posture. Success in this role requires the ability to work both independently and as part of a team, executing complex tasks simultaneously in a fast-paced, deadline-oriented environment.
Hiring Process
Candidates selected for this opportunity will undergo a standard evaluation process including an initial screening, technical assessment, and interviews with hiring managers. Please refer to the additional information section of the job requisition for specific details regarding clearance eligibility and the timeline for the interview stages.
Equal Opportunity Employer
Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information, and other legally protected characteristics. We are committed to fostering a diverse and inclusive workplace where all employees can thrive.
Accommodations
Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process—including accessing job postings, completing assessments, or participating in interviews—please contact People Operations at applicantaccom@maximus.com.
Work location
Work model: On-site
7282, Commonwealth Avenue, Jacksonville, Duval County, Florida, 32220, United States
Jacksonville, Florida
Key Responsibilities
- check_circlePerform complex risk analyses and risk assessments
- check_circleEstablish and satisfy Information Assurance and security requirements
- check_circleAdvise information system owners on security policies and requirements
- check_circleRecommend enhancements to align security policies with Federal and DoD requirements
- check_circleSupport the management of governance activities including vendor assessments and risk registers
- check_circleCollaborate with ISSOs to ensure alignment of organizational governance
- check_circleMaintain and enhance GRC systems and security awareness training programs
Requirements
- verifiedBachelor's Degree in related field
- verified5-7 years of relevant professional experience
- verified7+ years of security governance development and management
- verifiedCISSP, CISM, CISA, or GRC/audit certifications desired
- verifiedExperience with FedRAMP CSOs
- verifiedRMF and A&A experience desired
- verifiedStrong understanding of Federal requirements (Executive Orders, FISMA, FIPS, CMMC, NIST 800-171, 800-53, 800-60, 800-65)
- verifiedExperience with Federal and DoD GRC tools (CFACTS, CSAM, eMASS)
- verifiedExperience mapping policies to security frameworks
- verifiedSkilled in Microsoft Office, Smartsheet, and Lucid
Nice to Have
Certifications like CISSP, CISM, CISA, or GRC / audit or risk certifications. Experience supporting security governance for organizations using FedRAMP'd CSO's as it pertains to system-specific and hybrid controls. RMF and A&A experience.
Benefits & Perks
check_circleHealth insurance coveragecheck_circleLife and disability insurancecheck_circleRetirement savings plancheck_circlePaid holidays and paid time offShort- and long-term incentives