IT Security Analyst

Company Description

vTech can help you avoid the daunting task of writing and posting job offers, shifting through resumes and laboring through the lengthy interview process. Our Staffing solutions will allow you to elude those tasks and place topnotch, high-caliber professionals in the position you need to fill.

We use our expertise, knowledge, and global resources to deliver top-quality candidates and tailor our IT and Non-IT recruitment services to your needs. This allows us to deliver the required results in a timely manner that meets your schedule at a substantially reduced cost.

We pride ourselves for having one of the fastest growth rate and also the lowest turnover rates in the industry just 2.5 percent annually. We focus on the training and retaining qualified professionals with high personal and work ethics. With the help of our extensive database of internal candidates and CATS applicants tracking system, we can provide quality resources within the limited time frame.

We have also successfully placed hundreds of candidates in the areas related to Information Technology, Engineering, professional, Scientific & Clinical, etc. for both our commercial and government clients.

1. Source: A recruiter sources candidates from various sources; the search starts from our proprietary database. Using advanced sourcing methods like social media, professional networking media, internal, and 3rd party job boards, we identify qualified candidates.
2. Validate: A recruiter validates the candidates’ experience and skill sets against our client’s position.
3. Initial Screening: Based on the position and the client’s work culture, the recruiter uses initial screening questions to determine the most suitable candidates.
4. Submit: the recruiter will submit to the technical team qualified candidates who have passed the initial screening.
5. Technical Screening: The technical team then prepares a matrix of the particular requirements and required experience for the position and using a list of questions and the results, re-validates the candidates’ technical skills.
6. Background Check: Administrative personnel will provide a detailed background check, as required, per client agreement.
7. On board: On successfully completing the above steps, the candidates are welcomed on board and assisted to ensure a smooth integration at the client’s location.

Job Description

Job Description:

Monitor and advise on information security issues related to the systems and workflow at an agency to ensure the internal IT security controls for an agency are appropriate and operating as intended.

Years of Experience:

4-7 years of experience in the field or in a related area.

Responsibilities:

• Facilitate Security Control Assessment (SCA) and Continuous Monitoring Activities (Plans of Action and Milestones (POA&M) , Corrective Action Plans (CAP) with State of Michigan Applications.

• To be considered for this position, the candidate must be available to work in Lansing Michigan

• Examine, interview, and test procedures in accordance with NIST SP 800-53A Revision 4.

• Ensure State of Michigan & Agency policies are adhered to and that required controls are implemented.

• Validate respective information system security plans to ensure NIST control requirements are met.

• Execute SCA (DTMB-170) documentation, including but not limited to POA&M & CAP.

• Familiarity with NIST requirements, particularly 800-53 revision 3 and revision 4.

• Author recommendations associated with your findings on how to improve the customer’s security posture in accordance with SOM PSP & NIST controls.

• Ability to lead small, less complex system assessments independently

• Ability to assist team members & Vendors with proper artifact collection and detail to clients examples of artifacts that will satisfy assessment requirements

Qualifications:

• Candidate must have solid knowledge of information security principles and practices, as well as an advanced understanding of security protocols and standards.

• Candidate must have at (1-3) years of experience in the IT industry, and be familiar with the applicable NIST Special Publications 800-37 Revision 1, 800-53 Revision 3 or 4, and 800-53A Revision 1.

• Experience reviewing IT systems/applications plus basic knowledge of networking components and various operating systems in including UNIX and Microsoft.

• Candidate must have the ability to work independently and as part of a team

• Preferred that the candidate has a CISSP, CISA, PMP and/or Security+ certification, but it is not required

• Expertise in other Security Frameworks (ISO, NIST, COBIT, HIPAA/HITECH, etc.) and regulatory requirements is a plus

• Strong written and verbal communication skills including the ability to explain technical matters to a non-technical audience

• Collaborate on multiple projects at a given time and experience with Vendors is a plus

• Flexibility to adjust quickly to multiple demands, shifting priorities, ambiguity, and rapid change

Additional Information

All your information will be kept confidential according to EEO guidelines.