Systems Analyst

Job Location:

Windsor Mill, MD 21224, Position Type:
Full Time, Education Level: 4 Year Degree, Salary Range: $85,000.00 - $95,000.00 Salary/year

At RELI Group, our work is grounded in purpose. We partner with government agencies to solve complex challenges, improve public health, strengthen national security, and make government services more effective and efficient. Our team of over 500 professionals brings deep expertise and a shared commitment to delivering meaningful outcomes. Behind every solution is a group of experts who care deeply about impact—whether we’re supporting data-driven decisions, modernizing systems or safeguarding critical programs.

The Cyber Security Assessor provides support to the Department of Health and Human Services, Indian Health Service (IHS). This position is responsible for executing and assisting in the completion of security certifications and for providing support in the development and implementation of a program to manage all aspects of compliance with government regulations

• Conducts annual security controls effectiveness testing and manages the entire assessment lifecycle, including interfacing significantly with system owners and ISSOs in obtaining the system ATO.
• Assists system owners in developing security authorization packages that are fully compliant with National Institute of Standards and Technology (NIST) guidelines and organizational defined standards including: NIST SP-800-53,
  -30,
  -37,
  -115, at a minimum.
• In depth understanding of all NIST SP-800-53 rev5 controls and FedRAMP to ensure proficiency in conducting efficient assessments (interview, exam, testing).
• Evaluates the system documentation such as the SSP, ISCP, IRP, CMP, and SCRMP.
• Verifies the written SSP for compliance against the agency requirements and documents gaps.
• Evaluates the system scan reports for vulnerability and compliance.
• Documents findings and provides remediation recommendations on all applicable systems in accordance with established policies and procedures.
• Brief system stakeholders on findings to include, at a minimum, corrective recommendations for deficiencies, and POA&M explanations to correct deficiencies.
• Develops and authors various documents such as kick-off slides, security assessment plans, and security assessment reports.
• Proficient in Microsoft Office (Word, Excel, PowerPoint, etc.) and project management tool (i.e., JIRA).
• Manages each assessment as a project and ensures progress and proactive management and escalation, if needed.
• Proficient with a GRC tool (i.e., Archer).
• Responsible for aiding in own self-development by being available and receptive to all training made available by the company.
• Plans daily activities within the guidelines of company policy, job description and supervisor’s instruction in such a way as to maximize personal output.
• Responsible for keeping own immediate work area in a neat and orderly condition to ensure safety of self and co-workers. Will report any unsafe conditions and/or practices to the appropriate supervisor and human resources. Will immediately correct any unsafe conditions to the best of own ability.
• Promotes and encourages a culture of compliance with all applicable rules (federal, state, local, Federal Acquisition Regulations, Code of Federal Regulations, Prime Contract requirements, etc.) for themselves and the company as a whole. Fosters an environment in which they will report any violations or reasonably suspected violation of RELI policy, FAR, and/or CFR and are comfortable discussing the myriad compliance, conflict, FAR, CFR, etc.
  
  issues that arise during the performance of a government contract.

• Bachelor's degree in Computer Science or a…