FISMA Compliance Analyst

• Assist in ongoing training efforts for TAFT, RMS, FISMA and other DHS/TSA related IT Security mandates which may include developing and presenting briefings given to an audience of other IT professionals.
• Participate in the development and maintenance of reports (mostly MS Excel) which serve to monitor and track multiple FISMA related metrics.
• Analyze DHS-issued fiscal year policy documentation to determine the upcoming annual metrics TSA must follow and enforce.
• Use and maintain expertise in Trusted Agent FISMA Tool (TAFT) and the Risk Management System (RMS). Tasks include data research, report creation, account maintenance, data entry, file upload/downloading, etc.
• Some review of security documentation may be required, to include SSPs, RAs, CPs, CPTRs, ST&E Plans, ST&E Results, weakness matrices, PTAs, and others.

• Ability to and interest in providing support and guidance to ISSO/SO’s through the four phases of C&A, including monitoring C&A artifact compliance, annual self-assessment (NIST 800-53A) completion, vulnerability scans, annual contingency plan testing, and POA&M management. Must possess experience with FISMA.
• Able to assist with other ISSO responsibilities including documentation, policy compliance, and CM review, as well as user training.
• Working knowledge of Microsoft Office Suite (to include Excel, Word, and Powerpoint).
• Ability to work effectively in a team management environment and participate in collaborative initiatives which foster the mutual exchange of knowledge and expertise.
• Must be able to multi-task, work independently and as part of a team, share workloads, and deal with sudden shifts in project priorities.
• Ability to communicate effectively orally and in writing to build and maintain customer satisfaction and express conclusions in a clear, technically sound manner on matters associated with IT security.
• Ability and interest in obtaining a security/C&A certification (e.g., CAP).

DESIRED SKILLS:

• Awareness of current information security issues and the ability to interpret the requirements of relevant policies and standards set forth in NIST documentation, specifically, 800-37, 800-53A, FIPS-199/200, and 800-30.
• Knowledge of NIST in regards to how it applies to FISMA reporting.
• Above average skills in MS Excel, and MS Access (to include ability to use formulas, and/or write macros/code).

PLUSSES:

• Working knowledge of the Trusted Agent FISMA Tool (TAFT) and the Risk Management System (RMS) is a plus.
• CAP (Certification and Accreditation Professional)
• CISSP (Certified Information System Security Professional)