CSA + Capstone is currently seeking a Cybersecurity Analyst in Portsmouth, Virginia. The successful candidate should be technical, customer service oriented, and enthusiastic with respect to the nature of work.  This role will serve as a trusted advisor, providing Risk Management Framework support and guidance to our Navy client and contractor teams.
<h3>Responsibilities</h3>
<ul>
<li>Supports the development and ongoing maintenance/updates of system Assessment &amp; Authorization (A&amp;A) and other associated Risk Management Framework (RMF) documentation</li><li>Reports security violations and incidents to the Information System Security Manager (ISSM)</li><li>Conducts RMF assessments to support obtaining Authority To Operate (ATO) for new and existing systems</li><li>Monitors security controls and assists in implementing strategies for patching, scanning, security reviews, and reauthorizations</li><li>Implements practical guidance from Secure Technical Implementation Guidance (STIG) and Security Requirements Guides (SRG)</li><li>Maintains information with Enterprise Mission Assurance Support Service (eMASS)</li></ul>
<h3>Qualifications</h3>
<ul>
<li>A Bachelor’s degree in Information Technology, Computer Science, or another IT-related field.  4 years related experience can be substituted for a degree.</li><li>Minimum 4 years of experience in cybersecurity and functions related to Assessment &amp; Authorization under RMF.</li><li>Demonstrated experience applying the Risk Management Framework (RMF) for IT systems.</li><li>Demonstrated expired in Information Assurance (IA) controls analysis, risk assessments, risk mitigation analysis, or developing contingency plans.</li><li>Eligibility to obtain Interim Secret Clearance prior to start date</li></ul>
<h3>Certifications</h3>
<ul>
<li>Qualifying 8570 Baseline Certification for IAT Level II (e.g. CompTIA Security+)</li></ul>
<h3>Preferred Qualifications</h3>
<ul>
<li>Active Interim Secret Clearance</li></ul>This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.Applicants may need to meet eligibility requirements for access to classified information; an active United States Department of Defense security clearance or the ability to obtain one may be required for this role.CSA does not have a vaccination mandate applicable to all employees. To protect the health and safety of its employees and to comply with customer requirements, however, CSA may require employees in certain positions to be fully vaccinated against COVID-19. Vaccination requirements will depend on the status of the federal contractor mandate and customer site requirements.WE BELIEVE great companies know who they are and what they stand for. CSA’s common purpose and core values were purposefully developed to create a culture focused on unlocking the full potential of our people—so they are inspired to solve our clients’ toughest challenges. It’s no secret, we owe the past 18 years of our success to our outstanding and ambitious team members. To support our hard working team, we offer an environment focused on learning and growth, an awesome benefits package, and opportunities to build a long and successful career. We are constantly on the hunt for talented, forward-thinking problem solvers with an energetic attitude and a strong work ethic to join our elite team of CSAers.     Be a part of CSA… do great things!CSA is a Federal Contractor and an Equal Opportunity/Affirmative Action Employer.If you are an individual with a disability and would like to request a reasonable workplace accommodation for any part of our employment process, please send an email to hr@csaassociates.com. Please indicate the specifics of the assistance needed. Assistance is reserved for individuals who are requesting a reasonable workplace accommodation. It is not intended for other purposes or inquiries. We’re an equal opportunity employer that empowers our people no matter their race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or veteran status or other protected characteristic.Federal Equal Opportunity is the LawFederal Employee Rights under FMLAFederal Employee Polygraph Protection ActE-Verify Participation Poster (uscis.gov)If you are a California resident applying for a job, you consent to our California Job Applicant Privacy Notice.Notification for current or previously cleared professionals:Official U.S. Government information appearing in the public domain shall not automatically be considered UNCLASSIFIED or approved for public release. CSA recognizes that information contained in resumes of current or previously cleared professionals may be sensitive, contain potentially proprietary and/or protected information. Protected Information is considered classified, in the process of a classification determination, or unclassified, but protected by statute. Therefore, all resumes should be approved for public release by a U.S. Government Official with Original Classification Authority, prior to posting the resume to CSA’s applicant tracking system.By submitting my resume, I understand that I am NOT authorized to upload content with Official U.S. Government information that is considered, sensitive, proprietary, or protected.

Portsmouth

Cybersecurity Specialist

Bottomline Technologies

Bottomline is at the forefront of digital transformation.  We are a growing global market leader uniquely equipped to address the changing needs of how businesses pay and get paid.  Our culture of working with and for each other enables us to delight our customers.  We empower our teams to think like owners driving customer delight, helping them grow their business and win in their markets.
As a SWIFT Security Analyst, you'll play a key role in supporting multiple product teams to continuously improve our strong IT Security &amp; Compliance posture. Our clients operate in heavily regulated industries, and our goal is to meet or exceed their requirements. In collaboration with team members, you will be expected to provide support and guidance that helps Bottomline to win new customers and delight those already on-board.
This position can be based out of a REMOTE location within the US, East Coast preferred 
How you’ll contribute
<ul>
<li>Supporting audits and security assessments throughout the year by liaising with Auditors and SMEs, collating and presenting evidence to satisfy requirements</li>
<li>Assessing ad hoc Security and Compliance requests, then working with our teams of experts to provide accurate and timely responses to customers and prospects</li>
<li>Work collaboratively with teams to ensure governance or compliance improvements are implemented in a timely manner, leveraging best practice wherever possible</li>
<li>Maintain a regular cadence with teams to keep documents and artefacts updated</li>
<li>Assist the Data Protection Officer responding to individual and regulatory requests</li>
<li>Support the management and implementation of our Sanctions Compliance program</li>
<li>Prepare reports and presentations to share information with key stakeholders</li>
<li>Contribute to tactical planning and continuous improvements in Governance, Risk and Compliance procedures, bringing your own experience and enthusiasm to bear</li>
<li>Manage a complex; fast-paced environment with tight priorities</li>
<li>Commit to excellence in serving customers</li>
<li>Work across boundaries as part of a bigger team to deliver results</li>
</ul>
What will make you successful:
<ul>
<li>Bachelor's degree in Information Systems, Computer Science, or other related field from an accredited college or university, or equivalent</li>
<li>2-5 years’ Practical experience with SWIFT Security and Compliance is essential</li>
<li>Professional certifications in a relevant field would be an advantage</li>
<li>Previous experience working in 2nd / 3rd line IT Compliance role an advantage</li>
<li>Good working knowledge of common compliance frameworks (NIST, ISO, etc.)</li>
<li>Knowledge of common operating systems, infrastructure, and coding practices</li>
<li>Knowledge of prominent data protection legislation, such as CCPA and GDPR</li>
<li>Strong interpersonal skills</li>
<li>Bring curiosity, creativity and critical thinking to your work</li>
<li>Positive and optimistic attitude</li>
</ul>
Passion for identifying improvements through simplification and consistency. You’ll love Bottomline because in everything we do we seek to delight our customers and we are passionate about building a company of which we can all be proud, and this starts with building amazing teams filled with team members that challenge you every day.
#LifeatBottomline
#LI-DNI

SWIFT Security Analyst - Remote

Bottomline is at the forefront of digital transformation.  We are a growing global market leader uniquely equipped to address the changing needs of how businesses pay and get paid.  Our culture of working with and for each other enables us to delight our customers.  We empower our teams to think like owners driving customer delight, helping them grow their business and win in their markets
The Senior Security Audit Analyst is responsible for monitoring IT systems to ensure they follow policies and practices. They must evaluate technology, identify controls, and keep throughout records. In addition to monitoring IT systems, the Senior Security Audit Analyst shall implement policies and day-to-day functions related to cybersecurity, business continuity, disaster recovery management, compliance management/internal controls, risk management, ethics management, internal and external audits.  Compliance with industry mandated standards and controls (e.g. FFIEC, ISO27001, GDPR/CCPA, PCI, etc.). Additionally, they shall act as mentors to IT staff teams to ensure they have a solid understanding of procedures and necessary independence to conduct their own investigations, and are effective planners, communicators, and teachers.
The Senior Security Audit Analyst must retain authority, encourage problem solving, and promote a constructive work environment. They must be able to direct risk functions while understanding the risks and governance associated with current and emerging technologies. The Bottomline IT Risk Analyst shall compile a vast array of data into coherent reports for the CFO, CIO, GC, CISO and Sr. Director of Audit, Risk and Compliance.
This position can be based out of a remote location in the United States
How you’ll contribute:
<ul>
<li>Participate in the development of the annual IT Risk &amp; Governance design</li>
<li>Develop and implement internal policies and procedure documents to support IT compliance initiatives</li>
<li>Analyze the IT environment to evaluate application and infrastructure risks and controls</li>
<li>Coordinate, execute and manage the assessment and reporting phases for multiple concurrent IT Risk and Third Party Assessments</li>
<li>Design, review and approve tests that identify IT Risks, and provide strategic recommendations to enhance business operations</li>
<li>Present risks to senior management and negotiate suggested action plans</li>
<li>Promote a risk-aware culture; ensure efficient and effective risk and compliance management practices by adhering to required standards and practices</li>
<li>Mentor teams to develop skills and expertise with the IT risk process, technology, and client management</li>
<li>Participate in a primary capacity in supporting compliance, and regulatory activities, including, but not limited to: PCI, SSAE16, Regulatory, Sarbanes-Oxley (SOX 404), ISO27001/9001</li>
<li>Manage the ongoing effectiveness of information security controls (automated, manual, and needing development), working with a variety of control owners within the Information; Security and Technology organizations, and evaluating control design and standards in a variety of program areas</li>
<li>Advise senior and executive management on the status of technology risk and compliance controls based on assessment results and information from various monitoring and control systems</li>
<li>Support business initiatives with respect to resilience and Disaster Recovery &amp; BIA</li>
<li>Conduct research and make recommendations on products, services, protocols and standards in support of procurement and development efforts</li>
<li>Develop, implement and maintain change control and testing processes for service, application and infrastructure modifications</li>
<li>Establish appropriate end-user access controls, best practices and perform transaction and security assessments</li>
<li>Maintain up-to-date knowledge of the FinTech and Payments Industry and IT developments</li>
<li>Build and maintain strong internal relationships by demonstrating detailed knowledge of the client’s business environment</li>
<li>Maintain and increase personal knowledge of the Bottomline solutions and services to enable the better execution of the role</li>
<li>Deliver staff training and education in the areas of security, BCP, DR and best practice.</li>
<li>Participation in special projects or other duties as required</li>
</ul>
What will make you successful:
Strong understanding and knowledge of business risks and governance related to general system controls, system/applications development, change management, logical access security, local area network and wide area network concepts, contingency and recovery:
<ul>
<li>5+ years of experience in risk, governance and compliance information technology organization</li>
<li>Relevant, industry recognized security certification such as CISSP, CGEIT, CRISC, CISM, CSX PCI SA, PMP, CISM, CPP, CPA and CBCP</li>
<li>BA, BS or MBA Degree</li>
<li>Understanding of data management concepts</li>
<li>Knowledge of FFIEC, SSAE18, ISO27001/2, BCP/DR, NIST and COBIT relevant frameworks</li>
<li>Strong understanding of current regulatory expectations for financial services organizations</li>
<li>Excellent analytic, oral and written communication skills</li>
<li>Network &amp; Infrastructure Architecture network segmentation concepts, firewalls, routers, VPN solutions etc</li>
<li>Systems Development (including SDLC, project management, BCP/DR and change control methodologies</li>
<li>Infrastructure and Application Security Testing comprehension to understand risks associated with vulnerabilities</li>
<li>Physical Security &amp; Data Center Environmental Controls</li>
<li>Knowledge of Hosted and Windows environments, Client Server Technology, Networks,</li>
<li>Experience using GRC applications</li>
<li>CISSP, CGEIT, CRISC, CISM, CSX PCI SA, PMP, CISM, CPP, CPA and CBCP or other relevant certification preferred</li>
<li>Excellent project management skills</li>
<li>High attention to detail necessary to manage, analyze and finalize artifacts and documents</li>
<li>Familiarity with infrastructure, networking, security and software development processes</li>
<li>Organized, responsive, and able to manage multiple initiatives and tasks in parallel</li>
</ul>
You’ll love Botttomline because in everything we do we seek to delight our customers and we are passionate about building a company of which we can all be proud, and this starts with building amazing teams filled with team members that challenge you every day.
Start your #LifeAtBottomline
#LI-DNI

Senior Security Audit Analyst - Remote

Apply to Cyber Security Jobs in Portsmouth in companies remotely and near you. New Cyber Security Jobs in Portsmouth added daily.

Job Position and Company	Location	Tags	Posted
Cybersecurity Specialist at CSA	Full Time Comptia Analyst Manager DOD
SWIFT Security Analyst - Remote at Bottomline Technologies	Audits CCPA GDPR Golangvernance NIST
Senior Security Audit Analyst - Remote at Bottomline Technologies	Application Security Audits CCPA CISM Cissp

Cyber Security Jobs in Portsmouth

0 Cyber Security Jobs in Portsmouth. Page 1 of 1

3 closed cyber security jobs in portsmouth:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Portsmouth

0 Cyber Security Jobs in Portsmouth. Page 1 of 1

3 closed cyber security jobs in portsmouth:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter