Job Information
Cognosante Security Risk Management Framework Audit Analyst - Junior in Elizabeth City, North Carolina
Security Clearance required:
Secret
Do you want to make a difference?
Cognosante employees are passionate about improving people’s lives. With an innovative mindset and an unwavering commitment to those we serve, we partner with healthcare, civilian and defense agencies to deliver exceptional public services and programs. Our multi-faceted technology and customer experience (CX) solutions achieve program outcomes, solve critical challenges and create meaningful change. Whether we are helping Veterans access healthcare faster, ensuring that members of the military complete their missions safely, or helping people obtain health insurance, our work touches millions of people. Are you ready to make a difference?
Come Join Our Team
Join our team onsite in Elizabeth City NC to assist our US Coast Guard Client with Risk Management Framework security and analysis.
What is the position?
The Security Risk Management Framework Audit Analyst - Junior, under supervision, will perform risk analysis/risk assessments and define security requirements for all ISD support IT systems.
Design, develop, and implement solutions to IT system security requirements. As well as gather and organize technical information about existing security products, authorized vulnerability management policies, and procedures.
What will I get to do?
Assist the Security Controls Auditor in validating the security controls and the Risk Management Framework eMASS inputs for all ISD managed and maintained systems and will conduct an analysis of system vulnerability management, remediation solutions, and develop the necessary plan of action and milestones.
Ensure the risk analysis is consistent with applicable regulations and policies, while also ensuring the analysis will support internal or external compliance.
Evaluate, tests, monitor, and maintain information security policies, procedures, and systems such as hardware, firmware, and software. The incumbent will ensure security design, controls, and procedures are aligned with information security standards and are appropriate to mitigate risk of exposure.
Identifies security violations, determines cause, and implements procedures to prevent future incidents. Under direct supervision, performs routine assignments as an entry level professional. Develops core job competencies with existing procedures by solving standard problems.
Manage multiple concurrent project tasks, develop schedules, formulate plans and milestones and draft correspondence, reports, white papers, minutes, spreadsheets, communications products, briefs, and other documentation as needed.
Identify and develop methods, plans, and documents to streamline operating procedures, reports, and systems to improve operations, achieve savings, and encourage long range planning to assure the program/project produces results in a cost-effective manner.
What qualifications do I need?
Active DoD SECRET clearance required.
Required Certification: IAT-II Level/. One of the following CompTIA certifications: SEC+ , CCNA Security, CySA+, GICSP, CND or SSCP. MUST be current.
A Bachelor’s degree in one of the following: Risk Management, Cyber Security, Business, Project Management, or a related area OR a High School Diploma with IT certification and one (1) year hands on experience in one in information security control validation.
Ability to work onsite daily at the US Coast Guard site in Elizabeth City, NC.
Solid experience using Microsoft 365 Office Suite; Word, Outlook, Excel, SharePoint, OneNote, OneDrive, Teams, & Access
Fluency in security control frameworks and risk models including NIST and CMMC.
Experience performing compliance and control validation with NIST SP 800-171.
Excellent customer service and organizational skills.
Ability to control and facilitate meetings.
Candidate must be able to work both independently and as part of a team.
Candidate must possess strong oral communication and written comprehension capabilities.
Candidates not meeting the required qualifications will not be considered.
What additional characteristics will help me thrive?
- A proactive self-starter, who is a good team player with a great attitude and matching performance, will be a great plus.
What We Offer
Our mission is to provide comprehensive and competitive pay, benefits, services, and programs to eligible employees and their dependents that:
Ensure optimal health and productivity of our employees
Support employee retention and attraction
Provide work/life balance to ensure our employees succeed inside and outside of the office
Compensation
$60,422.60 - $90,633.90
The pay range for this job is determined by various factors, including but not necessarily limited to location, responsibilities of the job, and alignment with market data. When determining a salary for this role, the following factors may be taken into consideration - contract-specific affordability, education, knowledge, skills, competencies and experience. The estimate displayed represents the salary range for this position and is just one component of Cognosante’s total compensation package for employees. It is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee.
Cognosante will not provide sponsorship for employment-based immigration benefits for this position.
What We Promise
Cognosante employees are inspired by our bold mission to improve lives. To achieve this mission, we put our people first. No matter where they're located around the nation, our innovative workplaces enable individuals to apply their skills and experience to work toward a greater good.
We foster a winning culture of solution creators built on innovation, collaboration, flexibility, and work-life balance. And we invest in the next generation of diverse talent to foster an inclusive, progressive, adaptable workplace that prioritizes advancement for all. As an affirmative action employer, we are committed to equal opportunity regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.
Your safety during your job search is important. Recruiting communications will always be sent through one of the following corporate domain emails (@cognosante.com or @accurate.com).
We will never send communications through any other domain, including @cognosantecareers.com, @gmail.com or @yahoo.com). We will never request payment from you, nor will we send payment to you, prior to your start date. If you have been asked to send or receive any payment, or if you have any doubt about whether you have been contacted by a Cognosante employee, please contact us at jobs@cognosante.com
At Cognosante, we innovate with purpose. Each day, we create meaningful change by delivering mission-driven solutions for healthcare, civilian, and defense government agencies. When you work at Cognosante, you’ll apply your talents and grow your career with an organization that believes in the missions of our customers – and the right every employee has to an inclusive, flexible, and collaborative workplace. Work with us, and you’ll be challenged and supported—and have the platform to elevate your career to wherever your professional aspirations lead.
Get to know Cognosante employees
We’re driven by our customers’ missions, and measure success by how we improve lives.
We believe innovative solutions start with an innovative culture.
We believe customer understanding is the key to creating innovative solutions.
We know we are stronger together, and we value the diversity of our people.
We believe growth should be a core job benefit.
Like many other companies, Cognosante has been targeted by scammers making fraudulent job offers to potential candidates. As shared on our company website (https://cognosante.com/careers/) , communications from Cognosante recruiting are only sent with an official corporate domain email (e.g., @cognosante.com) and not a commercial domain e-mail (e.g., @gmail.com or @yahoo.com)). We will never request payment from an applicant, nor will we send payment to an applicant, prior to that individual’s start date.
We want to recommend a couple of ways that you can report this incident and take action against these scams:
-The FBI: File a Complaint (https://www.ic3.gov/Home/FileComplaint)
-The FTC: Report Fraud (https://reportfraud.ftc.gov/#/)
Also, if you're not sure where to report the scam, you can find some guidance here: Where to report scams | USAGov (https://www.usa.gov/where-report-scams) .