Senior Management Analyst

About us:

Creative Information Technology Inc (CITI) is an esteemed IT enterprise renowned for its exceptional customer service and innovation. We serve both government and commercial sectors, offering a range of solutions such as Healthcare IT, Human Services, Identity Credentialing, Cloud Computing, and Big Data Analytics. With clients in the US and abroad, we hold key contract vehicles including GSA IT Schedule 70, NIH CIO-SP3, GSA Alliant, and DHS-Eagle II.

Join us in driving growth and seizing new business opportunities!

Position Overview

The Senior Management Analyst will lead security-related activities for the biometric subsystem, ensuring compliance with Federal regulations, DHS policies, security requirements, certification and accreditation processes, vulnerability management, contingency planning, and system interconnection requirements.

Key Responsibilities

• Lead security activities supporting OBIM's biometric subsystem.
• Ensure systems and processes comply with applicable Federal regulations and DHS security policies.
• Support security compliance, certification, authorization, and accreditation activities.
• Coordinate and maintain security documentation and compliance artifacts.
• Support vulnerability scanning, assessment, remediation, and tracking.
• Develop and maintain contingency planning documentation and support contingency plan testing.
• Support system security assessments and remediation of identified deficiencies.
• Develop and maintain interface connection/interconnection documentation.
• Coordinate security requirements across complex, multi-tier IT environments.
• Support Authority to Operate (ATO) and security authorization activities.
• Work with technical teams to ensure security controls are properly implemented and documented.
• Support continuous monitoring and Federal/DHS security reporting requirements.
• Assist with security reviews, audits, assessments, and inspections.
• Help ensure security and privacy controls address the requirements applicable to DHS information systems.

Required Qualifications

• 8+ years of relevant security experience.
• Strong knowledge of Federal and DHS information security requirements.
• Experience with security compliance, certification/accreditation, and authorization processes.
• Experience with vulnerability scanning and remediation.
• Experience developing and maintaining contingency plans.
• Experience with system interconnection/interface security documentation.
• Experience securing large-scale, multi-tier IT and database environments.
• Experience integrating complex commercial software and custom-developed applications.
• Strong analytical, documentation, risk assessment, and communication skills.
• Knowledge of security controls and assessment practices, including NIST SP 800-53, is highly relevant to the role. The SOW requires independent validation and remediation of security/privacy control deficiencies against NIST SP 800-53