Cloud Service Provider Common Control Analyst at Jobs Via Dice

• Job Location Washington, DC
• Seniority Mid-Senior Level
• Type Full-time

Share on:

Description

Job Description ECS is seeking a Cloud Service Provider Common Control Analyst to work in our Washington, DC office.

ECS is seeking a Cloud Service Provider Common Control Analyst to support the Department of State (DOS), Bureau of Diplomatic Technology (DT).

This role is part of the Common Control team, responsible for ensuring high-value and mission-critical systems comply with federal cybersecurity policies.

The ideal candidate will serve as a Cloud Service Provider Common Control Analyst, executing the full range common control tasks spread throughout the Risk Management Framework (RMF).

Review and update existing information security policy, standards, and procedures based on federal and departmental regulations.

Perform independent security and privacy control assessments in support of Security Assessment & Authorization (SA&A).

Conduct assessments of existing and new FISMA systems, including subsystems in the respective system boundary, and communicate the results and potential implications of identified control weaknesses.

Reviews and analyze, Assessment & Authorization (A&A) packages to include System Security Plans (SSP), Risk Assessments, Information System Contingency Plans (ISCP), Back-up Standard Operating Procedures (SOP), Incident Response Plans (IRP), Configuration Management Plans, (CMP), Hardware/Software lists, Network Diagrams, Data Flows, System Change Requests/Proposals, Vulnerability scan reports, test reports, and Plan of Actions & Milestones (POA&Ms) for completeness, accuracy, and document effectiveness of controls, plans and procedures implementation.