IV&V Junior Analyst

Summary

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. They are seeking an IV&V Junior Analyst to ensure DHS-wide compliance with federal information security laws and to provide resources and guidance to support strategic decision-making processes for managing security and risk postures.

Responsibilities

• Support CISOD in performing IV&V testing over Component V&V of remediated IT controls. This includes: reviewing and performing analysis of Component V&V (performing a compliance check to ensure that controls tested by component are adequate), communicating results to the Component, tracking V&V packages, to include CISOD and OCFO signatures indicating completion, and providing updates to be included in monthly IT audit report(s)
• To provide Components to continue working to remediate their deficiencies, CISOD is committed to a 7-day turnaround for all submitted Component V&V packages
• Assist in reviewing component IT commitment letters and providing comments
• Monitor and report on testing/passing status against the component IT commitment letters
• For administration- create a process for selecting QA items for both assessments and remediation, create/update a checklist/process for QA of assessments and remediation, create responsibilities, accountabilities, consulted and informed (RACI) chart, develop Traceability Matrix, incorporate enhancements, design CFO designated system review/checklist to be completed for Assessments and Authorizations, enhance SSPs to incorporate guidance, GRC system updates, and finalize and publish standard guidance documents
• Assist in performing Security Authorization Reviews
• Evaluate each Component’s CFO- designated and other ancillary System Security Plans (i.e., SP) in order to determine if all CIC controls or components otherwise noted by DHS OCFO have been documented in their entirety
• The analysis requires the assessor to determine if the documentation includes the appropriate type of control, each applicable layer of the system, and note any valuable observations
• Additionally, developing measurable data that can be communicated to high-levels of management to make the information easily digestible

Skills

• Must be able to obtain a DHS Security Clearance
• Bachelor's degree with 4 or more years' experience in a related field; additional years of related work experience may be considered in lieu of degree
• Experience with DHS, DoDIIS, and IC tools, systems, and reporting mechanisms/requirements for IV&V
• Ensure compliance with DHS Standards and procedures
• Good familiarity with and understanding of all relevant government and agency policies and procedures to ensure system documentation is compliance with relevant guidelines, e.g., FedRAMP, RMF, FISMA, FIPS-II, NIST, etc
• U.S. Citizenship is required

Qualifications

Must Haves

• Must be able to obtain a DHS Security Clearance
• Bachelor's degree with 4 or more years' experience in a related field; additional years of related work experience may be considered in lieu of degree
• Experience with DHS, DoDIIS, and IC tools, systems, and reporting mechanisms/requirements for IV&V
• Ensure compliance with DHS Standards and procedures
• Good familiarity with and understanding of all relevant government and agency policies and procedures to ensure system documentation is compliance with relevant guidelines, e.g., FedRAMP, RMF, FISMA, FIPS-II, NIST, etc
• U.S. Citizenship is required

Benefits

• Health and Wellness programs
• Income Protection
• Paid Leave
• Retirement