Logo
SOSi

Information Security Analyst (SME)

SOSi, Washington

Save Job

Join to apply for the Information Security Analyst (SME) role at SOSi Join to apply for the Information Security Analyst (SME) role at SOSi SOSi is seeking a highly qualified Information Security Analyst (SME) to support the U.S. Courts under the Information Security & Validation Staff (ISVS) Governance, Risk, and Compliance (GRC) program. This role delivers expert-level support for governance, risk management, and compliance across the judiciary’s IT systems lifecycle. This role delivers expert-level support for governance, risk management, and compliance across the judiciary’s IT systems lifecycle . Responsibilities Serve as a subject matter expert (SME) on federal GRC frameworks, particularly the Risk Management Framework (RMF), NIST 800-53 Rev 5, and Judiciary Information Security Framework (JISF). Lead and perform activities across all RMF phases: Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor. Develop, review, and update System Security Plans (SSPs), POA&Ms, Risk Assessments, Privacy Impact Assessments, and Continuous Monitoring Strategies using tools like CSAM. Manage Nessus scanning (agent and non-agent based), vulnerability assessments, and remediation tracking. Conduct asset inventory, stakeholder engagement, information lifecycle mapping, and risk categorization. Ensure compliance documentation and authorization packages are complete, accurate, and aligned with agency standards. Collaborate with federal stakeholders to ensure governance, risk management, and compliance activities are integrated and operationalized. Support audit response, corrective action plans, and continuous improvement of ISVS processes. Qualifications 7-10 years of relevant experience in federal information security and GRC. Expert knowledge of NIST RMF, FISMA, FedRAMP, and continuous monitoring practices. Hands-on experience with CSAM, Nessus, and vulnerability management in a federal environment. Proven ability to develop SSPs, POA&Ms, Risk Assessments, and system categorization artifacts. Preferred Skills Relevant certifications (e.g., CISSP, CISM, CAP, CRISC) strongly preferred. Experience supporting federal judiciary or DOJ environments is a plus. Normal office conditions with potential to perform duties in deployed locations. Core hours of operation are Monday through Friday, 0600 – 1700. May be requested to work evenings and weekends to meet program and contract needs. Working at SOSi All interested individuals will receive consideration and will not be discriminated against for any reason. Seniority level Seniority level Mid-Senior level Employment type Employment type Full-time Job function Job function Information Technology Industries Government Administration and Government Relations Services Referrals increase your chances of interviewing at SOSi by 2x Inferred from the description for this job Medical insurance Vision insurance 401(k) Tuition assistance Get notified when a new job is posted. Sign in to set job alerts for “Information Security Analyst” roles. Information Systems Security Officer Level 1 Information Systems Security Officer (ISSO) Information Systems Security Officer (ISSO) Information Systems Security Officer (ISSO) Information Systems Security Officer (ISSO) Fort Meade, MD $70,000.00-$74,000.00 2 weeks ago Information Systems Security Officer (ISSO) Information Systems Security Officer (ISSO) Information Assurance Analyst II - Crystal City, VA Arlington, VA $130,000.00-$155,000.00 2 days ago Information Systems Security Officer (ISSO) Gaithersburg, MD $115,000.00-$125,000.00 1 week ago Information Systems Security Officer (ISSO) Information Systems Security Engineer - 2 (ISSO Duties) Security Control Assessor -SCA - Greater Washington DC Area Washington, DC $85,000.00-$127,000.00 3 days ago Arlington, VA $80,000.00-$94,000.00 2 days ago District of Columbia, United States $144,500.00-$195,500.00 2 weeks ago Arlington, VA $112,000.00-$179,000.00 1 day ago Senior Information Security Analyst/ISSO (TS/SCI with Poly) We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. #J-18808-Ljbffr