Senior Risk Analyst, Cyber GRC
CrowdStrike
CloudCyber SecurityServiceNow
A&A Risk Manager
TDI (Tetrad Digital Integrity)
full-time
Posted on:
Origin: • 🇺🇸 United States
Visit company websiteJob Level
SeniorLead
Tech Stack
Cyber SecuritySDLCServiceNow
About the role
- Ability to effectively manage compliance documentation, security plans, risk assessments, and other related documents within the GRC tool, ServiceNow, and SharePoint environments.
- Ability to serve as subject matter expert (SME) for the USPS A&A process.
Requirements
- Bachelors Degree with 10+ years of experience in A&A, GRC or relevant cyber security area
- Experience with and understanding of process to retire applications/systems across large organizations, including verification of remnant removal, to minimize security risks to the organization, and ability to advise application stakeholders through the process.
- Knowledge of and demonstrated experience leading site security reviews at various types of facilities to assess risk, and documenting findings, observations, and recommendations.
- In-depth understanding of Authorization & Assessment (A&A) requirements, standards, and best practices (e.g., NIST, FISMA) to advise security and IT professionals, application stakeholders, managers, and executives.
- Demonstrated ability to develop, track, analyze and regularly report status of goals, milestones, and metrics using complex and large data sets to measure the effectiveness of A&A processes.
- Knowledge and understanding of cybersecurity policies and processes sufficient to review, understand and provide inputs to internal security policies, SOPs and training documents.
- Demonstrated proficiency in using Governance, Risk, and Compliance (GRC) tools.
- Knowledge of or experience with the SDLC Retirement/Decommission process.
- TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States.
