Sr. Security Analyst

This position collaborates with management, application development teams, risk and audit teams, facilities personnel, security departments, and other stakeholders to identify risks and implement appropriate security plans. Strong knowledge of government information security regulations, control frameworks, and required compliance documentation, including experience developing and maintaining System Security Plans—SSPs.

Sr. Security Analyst 
Contract/ Contract to Hire
Atlanta, GA 

Job Summary:
The Information Security Compliance Specialist is responsible for analyzing the organization’s information security environment and supporting the development and implementation of security measures that protect information from accidental or unauthorized access, modification, destruction, or disclosure.
This position collaborates with management, application development teams, risk and audit teams, facilities personnel, security departments, and other stakeholders to identify risks and implement appropriate security plans. The role helps safeguard software applications, hardware, telecommunications systems, computer installations, and other information assets.
The successful candidate will help establish, implement, and enforce security policies while maintaining a high level of trust and confidence in the organization’s information security practices. This position may support multiple network security, compliance, and risk-management projects simultaneously.
 
Essential Responsibilities:

• Lead information security technology tasks, initiatives, and projects.
• Communicate effectively with employees, stakeholders, and all levels of management.
• Develop, coordinate, maintain, and regularly update project plans.
• Prepare cost-analysis estimates for information security projects and initiatives.
• Interact with customers and business partners as required by project objectives.
• Understand business processes and their relationship to information security requirements.
• Define, redesign, document, and improve security processes and procedures.
• Coordinate the development and delivery of information security awareness and training programs.
• Work with resource owners to establish appropriate security policies and controls for protected resources.
• Consult with IT teams to evaluate, select, install, and configure hardware and software systems that provide appropriate security capabilities.
• Help resource owners understand and respond to security incidents, control failures, and security-related problems.
• Assist with determining the cause of security-related events and identifying potential security risks.
• Communicate normal and exception-processing requirements related to security authorization requests and potential security breaches.
• Support the development, review, and maintenance of information security policies and compliance documentation.
• Maintain resource classifications and security-related records.
• Present security status, project updates, and security training information to management and IT personnel as needed.
• Proactively protect the integrity, confidentiality, and availability of company information and systems.
• Consult with business units to ensure that realistic and effective security-enforcement mechanisms are selected and implemented.
• Review security policies and assist with auditing system and application logs.
• Support the development and maintenance of disaster-recovery plans, processes, and procedures.
• Research, evaluate, design, test, recommend, and plan the implementation of new or improved information security technologies.
• Train information and system owners on implementing required cybersecurity controls.
• Perform other duties as assigned.

 
Top Five Mandatory Skills:

1. Deep understanding of NIST SP 800-171 and NIST SP 800-53 controls and compliance requirements.
2. Previous experience with U.S. government IT compliance requirements, particularly Cybersecurity Maturity Model Certification—CMMC.
3. Strong knowledge of government information security regulations, control frameworks, and required compliance documentation, including experience developing and maintaining System Security Plans—SSPs.
4. Excellent written and verbal communication skills, with the ability to research and interpret regulatory requirements and provide clear, concise summaries to business partners and senior leadership. Experience drafting and interpreting policies and procedures is required.
5. Practical audit and control-testing experience, with demonstrated ability to manage projects and drive corrective actions across multiple functional areas.

Required Qualifications:
 

• Six or more years of relevant information security, cybersecurity compliance, risk-management, or IT audit experience.
• Bachelor’s degree from an accredited college or university.
• Candidates with three or more years of relevant experience, or an equivalent combination of education, professional experience, and formal training, may also be considered.
• Experience with information security regulations, risk assessments, audits, control testing, and compliance documentation.
• Experience managing security-related projects and coordinating activities across functional teams.
• Strong understanding of information security policies, procedures, standards, and technical controls.
• Ability to analyze complex regulatory and technical requirements and translate them into practical business actions.

Preferred Qualifications

• Airline industry experience.
• Broad exposure to business planning, systems analysis, or application development.
• Experience with data administration and security methodologies.
• Knowledge of database design and security techniques.
• Familiarity with multi-platform technology environments.
• Previous IT audit experience.

 
Core Competencies
Communication Skills:
Ability to communicate clearly and professionally, both verbally and in writing, with employees and management at all organizational levels. Capable of adjusting communication based on the audience and presenting complex information in an understandable manner.
Integrity and Trust
Consistently demonstrates honesty, sound judgment, and professionalism. Maintains confidentiality, acknowledges mistakes, communicates information accurately, and acts in the best interest of the organization.
Teamwork
Works effectively in a collaborative environment, supports team objectives, completes assignments, contributes positively to discussions, and develops productive relationships across the enterprise. Shares knowledge and supports team members through mentoring and knowledge transfer.
Technical Expertise
Demonstrates a commitment to expanding technical and functional knowledge. Remains current on cybersecurity developments, regulatory requirements, control frameworks, and industry practices. Applies relevant technical processes to appropriate business needs.
Job-Specific Competencies
Dedication
Demonstrates the willingness to invest the time and effort necessary to complete assignments, achieve objectives, and deliver successful results.
Functional Expertise
Possesses a strong understanding of the policies, procedures, standards, and general practices relevant to information security, cybersecurity compliance, and risk management.
Interpersonal Skills
Interacts professionally and diplomatically with individuals who have varying communication styles, technical knowledge, responsibilities, and organizational levels.
Problem Solving
Uses logical and structured methods to analyze complex problems, identify root causes, evaluate available information, and develop practical and effective solutions.
Task and Project Management
Delivers high-quality work within established deadlines. Translates plans into action by following applicable procedures and methodologies. Proactively monitors project and task status, identifies potential barriers, and communicates, resolves, or escalates issues appropriately.
 
 
“All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.”