Sr Analyst - ISO Security Governance
Not Disclosed•Full-TimeOn-site
location_onLucky, 18, Kirk Avenue Southwest, Roanoke, Virginia, 24011, United States
About the Role
This position serves as a strategic partner in navigating the complex landscape of Federal and Department of Defense (DoD) security governance. You will act as a bridge between technical security requirements and business objectives, ensuring that organizational policies align with rigorous federal mandates. The role is designed for a seasoned professional who can translate complex NIST verbiage into understandable business terms while maintaining the highest standards of Information Assurance.
In this capacity, you will not only assess risk but also shape the security posture of the organization. You will collaborate closely with Enterprise and Project Information System Security Officers (ISSOs), Business Development teams, and Capture teams to ensure seamless alignment of governance with existing and prospective federal contracts. Your work will directly influence vendor assessments, enterprise risk registers, and the ongoing management of governance activities from a federal perspective.
The Team and Mission
At Maximus, we are dedicated to supporting critical government missions through robust security frameworks. Our team operates at the intersection of compliance and innovation, ensuring that our clients' systems remain secure, compliant, and resilient against emerging threats. We value a culture of initiative and judgment, where team members are empowered to develop solutions for complex problems and navigate the fast-paced, deadline-oriented environment of federal contracting.
Hiring Process
Candidates selected for this role will undergo a comprehensive evaluation process designed to assess both technical expertise and cultural fit. This typically includes an initial screening to verify clearance eligibility and experience, followed by in-depth interviews focusing on security governance, risk analysis, and the ability to collaborate across diverse teams. Specific steps may vary based on the contract requirements and the specific needs of the hiring team.
Equal Opportunity Employer
Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information, and other legally protected characteristics. We are committed to fostering a diverse and inclusive workplace where all employees can thrive.
Accommodations
Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process—including accessing job postings, completing assessments, or participating in interviews—please contact People Operations at applicantaccom@maximus.com.
Work location
Work model: On-site
Lucky, 18, Kirk Avenue Southwest, Roanoke, Virginia, 24011, United States
Roanoke, Virginia
Key Responsibilities
- check_circlePerform complex risk analyses and risk assessments
- check_circleEstablish and satisfy Information Assurance and security requirements
- check_circleAdvise information system owners on security policies and requirements
- check_circleRecommend enhancements to align security policies with Federal and DoD requirements
- check_circleSupport the management of governance activities including vendor assessments and risk registers
- check_circleCollaborate with ISSOs to ensure alignment of organizational governance
- check_circleMaintain and enhance GRC systems and security awareness training programs
Requirements
- verifiedBachelor's Degree in related field
- verified5-7 years of relevant professional experience
- verified7+ years of security governance development and management
- verifiedCISSP, CISM, CISA, or GRC/audit certifications desired
- verifiedExperience with FedRAMP CSOs
- verifiedRMF and A&A experience desired
- verifiedUnderstanding of Federal requirements (Executive Orders, FISMA, FIPS, CMMC, NIST 800-171, 800-53, 800-60, 800-65)
- verifiedExperience with Federal and DoD GRC tools (CFACTS, CSAM, eMASS)
- verifiedMicrosoft Office, Smartsheet, and Lucid skills
Nice to Have
Certifications like CISSP, CISM, CISA, or GRC / audit or risk certifications. Experience supporting security governance for organizations using FedRAMP'd CSO's as it pertains to system-specific and hybrid controls. RMF and A&A experience.
Benefits & Perks
check_circleHealth insurance coveragecheck_circleLife and disability insurancecheck_circleRetirement savings plancheck_circlePaid holidays and paid time offShort- and long-term incentives