IT Business Analyst​/Project Manager

The Office of International Visitors and U.S. Speaker Program (OIV) within the Bureau of Educational and Cultural Affairs (ECA), Professional Exchanges, Office of International Visitors (ECA/PE/V) in Washington, DC, needs to hire a full-time IT Business Analyst/Project Manager to support the Office of International Visitors and U.S. Speaker Program (OIV).

The incumbent will serve as an IT Business Analyst/Project Manager in the U.S. Department of State's (DOS) Bureau of Educational and Cultural Affairs (ECA) under the authority of the Fulbright-Hays Act of 1961 as amended and the Smith-Mundt Act of 1948. The International Visitor Leadership Program (IVLP) is a professional exchange program that strengthens bilateral and multilateral relations, which advance U.S. positions on global issues.

The position has two primary areas of responsibility: (1) fulfilling High Value Asset (HVA) compliance requirements for IVLP data, currently in the International Visitor Leadership Program Resource Center (IVRC) platform, and (2) conducting a comprehensive analysis and modernization of the office's current information systems and databases. Incumbent will serve under the direction of a Division/Branch Chief to support the IVLP mission and enhance operational efficiency.

The IT Business Analyst/Project Manager will serve in the Office of International Visitors and U.S. Speaker Program at the U.S. Department of State's Bureau of Educational and Cultural Affairs. The incumbent will be responsible for ensuring compliance with federal HVA requirements and conducting comprehensive analysis and modernization of the office's information technology systems and databases.

The IT Business Analyst/Project Manager position is responsible for managing HVA compliance activities and conducting information systems analysis and modernization. The incumbent will have broad, independent responsibilities and authority to ensure successful fulfillment of all HVA requirements and provide strategic recommendations for technology improvements.

• Provide updated high value asset (HVA) system information during quarterly and annual data calls as required by the Department's HVA Oversight Program
• Ensure that the HVA Security Control Overlay for the IVRC system (or a subsequent platform) is implemented
• Ensure that the IVRC system (or a subsequent platform) meets Department Continuous Diagnostics and Mitigation (CDM) requirements
• Maintain ongoing authorization of the IVRC system (or a subsequent platform)
• Coordinate and participate in annual penetration testing for the IVRC system (or a subsequent platform)
• Participate in tri-annual HVA assessments as required by BOD 18-02

• Respond to the annual BOD 18-02 Data Call questionnaire in early May to validate that IVRC (or a subsequent platform) continues to meet HVA criteria
• Collaborate with the HVA Oversight Team to successfully complete and submit all required data call responses
• Provide responses to additional requests for information from the HVA Oversight Team as needed
• Update Point of Contact (POC) lists for all bureau HVA stakeholders on a quarterly basis and/or upon any role changes

• Coordinate with the HVA Oversight Team regarding assigned assessment quarters and scheduling for system assessments
• Participate in HVA Assessment Kick-Off Meetings 15 days prior to the start of assessments
• Gather, review, and provide HVA technical documentation as requested
• Participate in all assessment meetings including Technical Exchange Meetings (TEMs), penetration testing activities, and out briefs
• Respond to assessment artifacts and documentation requests in a timely manner

• Create POA&Ms in Arch Angel for all open HVA assessment findings
• Develop and submit remediation plans for all high, major, and critical findings if full remediation cannot be completed within 30 days of the final assessment report
• Ensure remediation plans are signed by bureau leadership
• Provide remediation plan updates to the HVA Oversight Team every 30 days until findings have been remediated
• Provide evidence of Independent Verification & Validation (IV&V) confirmation of finding remediation

• Respond to quarterly Federal Information Security Modernization Act (FISMA) Data Calls to ensure the Department meets FISMA requirements for HVA systems
• Provide accurate and timely responses to HVA-specific FISMA metrics…