Information Security Analyst

Perform all procedures necessary to ensure the safety of FAVES information systems assets and to protect systems from intentional or inadvertent access or destruction
Monitor, evaluate, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web-based security
Implement, enforce, communicate, and develop security policies or plans for data, software applications, hardware, telecommunications, and information systems security education/awareness programs
Responsible for maintaining program security core documents: SCD, SSP, etc.
Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance
Assist with implementation of countermeasures or mitigating controls
Conduct regular control audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in security plans
Conduct routine investigations of information systems security violations and incidents, reporting as necessary to management
Ensure the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through maintaining a Risk Management Framework that supports ATO sustainment and renewal
Prepare incident reports of analysis methodology and results
Ensure compliance with regulations and privacy laws