security compliance analyst

Airgas

<div>R10087128 Senior Application Security &amp; Compliance Analyst (Open)
<p></p><p>Location:
</p>Radnor, PA (Airgas HO) - Management - Digital &amp; IT Airgas
<p></p><h2 class="jobSectionHeader"><b>How will you CONTRIBUTE and GROW?
</b></h2><p></p>At Airgas, we are committed to building a diverse and inclusive workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world.
<br>
<br>
Airgas is Hiring for a Senior Application Security &amp; Compliance in Radnor, Pennsylvania!
<p><b><i>We are looking for you !
</i></b></p><ul><li><p>Bachelor&rsquo;s degree in Computer Science, Information Systems
</p></li><li><p>Candidates must be legally authorized to work in the U.S. without current or future sponsorship.
</p></li><li><p>Work schedule: This is a hybrid role requiring three days in the office and two days remote.
</p></li></ul><p></p><p>Recruiter: Roseanne Khachikyan / Roseanne.Khachikyan@airliquide.com / 424-318-0169
</p><p>Recruiter Neelam Patel / neelam.patel@airliquide.com / 913.343.5762
</p><p></p><p>The Senior Application Security &amp; Compliance Analyst is the primary internal subject matter expert (SME) responsible for the security and performance optimization of the global Customer Experience (CX) digital ecosystem. This role ensures compliance across core Salesforce products, connected SaaS platforms, and edge delivery infrastructure. They also lead the transition of security and edge management functions to internal operations, acting as the final technical escalation point while balancing robust protection with high-performance CX needs.
</p><p></p><ul><li><p>SaaS Governance and Configuration: Lead the security configuration and account management for the CX SaaS stack (including Coveo, Contentful, Viamedici, Bynder) and manage Customer Data Architecture (CDA) SaaS integrations to ensure secure data exchange.
</p></li><li><p>Application and Infrastructure Security: Lead the end-to-end setup and management of Cloudflare CDN services, overseeing WAF/WAAP, Bot Management, DDoS protection, CDN optimization, and SSL/TLS/DNS management.
</p></li><li><p>Application Security Lifecycle and Identity Management: Conduct deep-dive security reviews, coordinate the lifecycle of penetration testing and vulnerability remediation, and directly oversee Okta CIAM implementation, security, and permission model auditing.
</p></li><li><p>Compliance and Vendor Transition: Serve as the technical lead for PCI compliance across the CX ecosystem and successfully transition legacy security and CDN management functions from external providers to internal operations.
</p></li></ul><h2 class="jobSectionHeader"><b>________________________
</b></h2><h2 class="jobSectionHeader"><b>Are you a MATCH?
</b></h2><p></p><p>Required Qualifications
</p><ul><li><p>Bachelor&rsquo;s degree in Computer Science, Information Systems, or a relevant technical area, or equivalent demonstrated experience.
</p></li><li><p>People Management: Proven experience leading teams of senior technical contributors or architects.
</p></li><li><p>Platform Expertise: Minimum of 5 years of experience as a Software Solution Architect with a focus on eCommerce or Salesforce technology (Commerce, Marketing, Sales, Data 360, and CPQ).
</p></li><li><p>Security Depth: 8+ years of progressive experience in Information Security or Security Engineering, with specific expertise in OWASP Top 10, API security, and Edge Security (Cloudflare/CDN).
</p></li><li><p>DevSecOps Tooling: Hands-on experience with GitHub SaaS, SonarQube, and Atlassian Tools.
</p></li></ul><p></p><p>Preferred Qualifications
</p><ul><li><p>Expert-level knowledge of Cloudflare CDN, including WAF/WAAP tuning, Bot Management, and performance optimization.
</p></li><li><p>Deep knowledge of security principles in cloud environments (AWS/GCP) and securing complex SaaS solutions.
</p></li><li><p>Hands-on experience with security testing tools (vulnerability scanners, SAST, DAST) and SSO protocols (SAML, OAuth).
</p></li></ul><ul><li><p>Proven experience securing headless or composable SaaS architectures like Contentful, Coveo, and Bynder.
</p></li><li><p>Exceptional ability to articulate complex security and edge delivery risks to non-technical CX stakeholders.
</p></li></ul><p>________________________
</p><p><b>Benefits
</b></p><p></p><p>We care about and support our Airgas Families. This is evident not only through our competitive compensation but also through a comprehensive benefits package that includes medical, dental, and vision plans, short-term and long-term disability, life and accidental death and dismemberment (AD&amp;D) insurance, Employee Assistance Program (EAP), pre-tax commuter transportation benefit, parental leave, vacation, sick time, floating holidays, jury duty and funeral/bereavement leave, and paid holidays for all eligible full-time employees.
</p><p></p><p>Additionally, we offer our eligible employees a 401k plan with company matching funds, tuition reimbursement, discounted college tuition for eligible employees&rsquo; dependents, and an Airgas Scholarship Program for dependent children.
</p><p></p><p>Associates who are members of collective bargaining units should review their bargaining agreement to determine whether they are eligible for some or all of the benefits described here and to see any special terms or conditions for eligibility.
</p><p></p><p>_________________________
</p><p></p><p><b>Your DIFFERENCES enhance our PERFORMANCE
</b></p><p></p><p>At Airgas, we are committed to building a workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world.
</p><p></p><p>We welcome and consider applications from all qualified applicants, regardless of their race, gender, sexual orientation, religion, disability or any other protected characteristic. We strongly believe a diverse organization opens up opportunities for people to express their talent, both individually and collectively and it helps foster our ability to innovate by living our fundamentals, acting for our success and creating an engaging environment in a changing world.
</p><p></p><p>_________________________
</p><p></p><p><b>About Airgas
</b></p><p></p><p>Airgas, an Air Liquide company, is a leading U.S. supplier of industrial, medical and specialty gases, as well as hardgoods and related products; one of the largest U.S. suppliers of safety products; and a leading U.S. supplier of ammonia products and process chemicals. Through the passion and diversity of its 18,000 associates, Airgas fosters a culture of safety, customer success, sustainability and innovation. Airgas associates are empowered to share ideas, take initiative and make decisions.
</p><p></p><p>Airgas is a subsidiary of Air Liquide, a world leader in gases, technologies and services for industry and healthcare. Present in 60 countries with approximately 66,500 employees, Air Liquide serves more than 4 million customers and patients.
</p><p></p><p>Join us for a stimulating experience: At Airgas, you matter and so does the work you do. As a member of our team, you play an important role in the success of your team, making sure our products are created sustainably and delivered safely and efficiently. In turn, you&rsquo;ll find a welcoming workplace where you&rsquo;re valued for who you are and where you can fill your potential while growing a fulfilling career &mdash; whatever path you choose.
</p><p></p><p>_________________________
</p><p></p><p><b>Equal Employment Opportunity Information<br>
</b><br>
</p><p>We are an equal opportunity employer. We welcome all qualified applicants regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.
</p><p></p><p>Airgas, an Air Liquide Company is a Government contractor subject to the Vietnam Era Veterans&rsquo; Readjustment Assistance Act of 1974 and Section 503 of the Rehabilitation Act of 1973.
</p><p></p><p>Airgas does not discriminate against qualified applicants with disabilities, and is committed to providing reasonable accommodations to the known disabilities of such individuals so as to ensure equal access to benefits and privileges of employment. If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact us by email at us-accommodationrequest@airgas.com.
</p><p>_________________________
</p><p></p><p>California Privacy Notice</p></div>

Senior Application Security & Compliance Analyst

Ropes & Gray LLP

<div>About Ropes &amp; Gray:
<p>
Ropes &amp; Gray is a preeminent global law firm. The firm has been ranked in the top three on <i>The American Lawyer's</i> prestigious A-List for eight consecutive years and #1 on <i>Law.com's</i> UK A-List twice in the past three years - rankings that honor the &quot;best of the best&quot; law firms.<br>
<br>
The firm has approximately 2,500 lawyers and professionals serving clients in major centers of business, finance, technology, and government in Boston, Chicago, Dublin, Hong Kong, London, Los Angeles, Milan, New York, Paris, San Francisco, Seoul, Shanghai, Silicon Valley, Singapore, Tokyo and Washington, D.C.<br>
<br>
The firm has consistently been recognized for its leading practices in many areas, including asset management, private equity, M&amp;A, finance, real estate, tax, antitrust, life sciences, health care, intellectual property, litigation &amp; enforcement, privacy &amp; cybersecurity, and business restructuring.<br>
<br>
Ropes &amp; Gray is an equal opportunity employer.</p>
Overview:
<div>
Reporting to the Manager of Information Security Risk &amp; Compliance, the information security risk &amp; compliance analyst assists in the management and execution of the firm&rsquo;s data security, compliance, and risk management programs. The position supports information security, privacy, compliance, and data governance initiatives and helps promote a culture of information security throughout the organization. The role requires a basic understanding of IT systems and security concepts, and a willingness to learn and grow in the field.</div>
Responsibilities:
<ul><li>Assist in maintaining the firm&rsquo;s ISO 27001:2022 Information Security Management System, assist with SOC2 audit preparedness and SOC2 audit completion, and support additional compliance activities as needed.</li><li>
Support the firm&rsquo;s initiatives to be at the forefront of GenAI and legal technology, reviewing vendor offerings and providing guidance on secure-by-design principals that meet or exceed industry standards.</li><li>
Support monitoring of the firm&rsquo;s policies and procedures.</li><li>
Help coordinate vulnerability management activities with guidance from other team functional areas.</li><li>
Assist in vendor risk management program tasks.</li><li>
Support responses to client audits, client RFPs, and related requests.</li><li>
Help coordinate third party technical risk assessments and audit activities.</li><li>
Assist in producing and maintaining information security documentation, including policies, procedures, standards, guidelines, and diagrams.</li><li>
Help assess potential items of risk and opportunities of vulnerability in the network</li><li>
Assist in Change Management and architecture reviews of new and existing firm technology.</li><li>
Participate in knowledge transfer sessions and training with senior team members.</li><li>
Promote a culture of information security across business units under guidance.</li><li>
Learn about the role of systems and technology within the firm and their value to the business.</li></ul><div><b>
OTHER RESPONSIBILITIES:</b></div><ul><li>
Pursue relevant security certifications and attend industry seminars and continuing education events as assigned.</li><li>
Perform other related duties as assigned.</li></ul>
Qualifications:
<div><b>
EDUCATION, EXPERIENCE AND SKILLS REQUIRED:</b></div><ul><li>
Bachelor of Science in a technology-related discipline or 1-2 years of relevant experience</li><li>
1-2 years of experience in information security, IT risk management, or IT support</li><li>
Basic knowledge of ISO 27001:2022 and risk management frameworks (ISO 27005, NIST, COBIT 5).</li><li>
Knowledge of SOCII audit criteria and procedures.</li><li>
Basic understanding of HIPAA and data security regulations</li><li>
Familiarity with Microsoft, Cisco, Unix/Linux, and mobile technologies</li><li>
Strong written and oral communication skills</li><li>
Organized, responsive, and willing to learn</li><li>
Security certification (such as Security+, SSCP, or similar) preferred but not required</li></ul><div><b>
ESSENTIAL CAPABILITIES:</b></div><ul><li>
Ability to relate to non-technical users in user-friendly language</li><li>
Ability to understand technical implications of security threats with guidance</li><li>
Ability to manage multiple tasks and prioritize under supervision</li><li>
Ability to maintain confidentiality of internal and personnel affairs</li><li>
Ability to work well with others and contribute to team spirit</li><li>
Self-motivated and eager to develop professionally</li><li>
Ability to work in a multi-office environment and willingness to travel as required</li><li>
Ability to work effectively in a culturally and educationally diverse environment</li></ul>
Compensation and Total Rewards Package:
<p>
Ropes &amp; Gray is proud to offer a comprehensive Total Rewards package to our business support team members. The firm also offers comprehensive health and well-being benefits, personal and professional development, career growth opportunities and a collegial and supportive culture. The anticipated pay range for this role is listed below and represents our good faith and reasonable estimate of the starting salary range at the time of posting. In addition, this role is eligible for a discretionary bonus based on performance. The actual offered rate for this position will be determined based on job-related, non-discriminatory factors, including qualifications and experience, geographic location, education, external market data and consideration of internal equity.</p><ul><li>
Boston: $88,600 - $135,100</li><li>
New York: $96,600 - $147,300</li></ul>
Working Conditions:
<p>
This position requires hybrid on-site presence as an essential function of the role. Consistent and predictable on-site presence is required for ongoing business continuity, professional development and effective collaboration with colleagues and management.</p></div>

Information Security Risk & Compliance Analyst

QuadMed

<div>Creating a better way. It&rsquo;s more than just the philosophy we were founded on. It&rsquo;s our purpose. For our employees, it means more time with patients. Unrushed visits to build meaningful relationships. And most importantly, an opportunity to empower our patients to achieve their full potential &ndash; at work and in life. Determined to make a difference? Join our health care revolution and be a part of something better.<br>
<p>
QuadMed is looking for an <b>IT Security Analyst</b> to join our QuadMed IT team. This is a remote role with occasional travel.<br>
</p><p><b>GENERAL PURPOSE OF JOB</b></p>
<p>
The IT Security Analyst assists the Director of Information Security and Compliance in developing, coordinating, and supporting the overall objectives of QuadMed&rsquo;s information security, risk management and compliance programs. This includes participating in special projects, developing and implementing information security and compliance auditing and monitoring activities, and identifying opportunities to improve QuadMed&rsquo;s overall risk posture.</p><br>
<p></p>
<p><b>
KEY RESPONSIBILITIES</b></p>
<ul>
<li>Conducts reviews of organizational and functional activities, evaluating the adequacy and effectiveness of information technology security controls. (IT General Controls/Splunk/Nessus/3rd Party)</li>
<li>Performs regular audits and participates in a variety of special projects to improve systems or processes and/or to reduce organizational risks. (IT General Controls, SOC2, PCI, HIPAA)</li>
<li>Assists with the development of risk and threat matrices to track organizational risks and mitigation efforts. (Scorecards, Security reporting, System vulnerability tracking)</li>
<li>Coordinates and assists with third party audits and assessments (HIPAA, Risk, DR, PCI, SOC2).</li>
<li>Assists with security risk assessments for new and current third-party vendors. (VSQ, BDS, SOC 2)</li>
<li>Collaborates with other departments to implement process improvement or remediation activities as generated by findings from internal / external audits.</li>
<li>Utilizes reporting tools to identify questionable user behaviors such as inappropriate access, irregular usage patterns, excessive account lock outs or other activities.</li>
<li>Identifies, prepares and maintains appropriate and required data, records, reports and other documentation relevant to carrying out all the above activities and assists with reporting the business&rsquo; performance in these areas.</li>
<li>Coordinates employee education, awareness, training and testing activities including phish and insider threat testing.</li>
<li>Actively seeks knowledge of new, automated, or more efficient auditing and monitoring techniques to increase departmental and/or organizational efficiency and effectiveness.</li>
<li>Helps coordinate the reviews of system documentation, and security or compliance related policies and procedures.</li>
<li>Performs other duties as assigned to support departmental initiatives as well as overall strategic goals and objectives of the Company.</li></ul><br>
<p></p>
<p><b>
JOB REQUIREMENTS</b></p>
<p><b>
Education</b>:</p>
<ul>
<li>Bachelor&rsquo;s Degree from a four-year college or university in business, healthcare, information technology, security or a related field required</li>
</ul>
<p><b>Experience</b>:</p>
<ul>
<li>The ideal candidate will have at least one (1) year experience in a healthcare setting, most notably in a HIPAA, privacy, security or audit/compliance-related role.</li>
</ul>
<p><b>Certificates, Licenses, Registrations:</b></p>
<ul>
<li>Certifications in areas of healthcare compliance, privacy, security, health information management, risk management assurance, internal auditing, and/or Epic Systems preferred</li>
</ul>
<p><b>Knowledge, Skills &amp; Abilities:</b></p>
<ul>
<li>Knowledge of healthcare laws and regulations, auditing and monitoring principles, risk management, electronic health record systems and a strong ability to interpret and present multifaceted concepts and analyses.</li>
<li>Knowledge and experience with HIPAA and other privacy-related regulations and the application of these regulations in a healthcare setting, or a similar job that required interpretation of complex regulations and communication of same to all levels of workforce.</li>
<li>Requires analytical and problem-solving skills to ensure that internal controls, policies and procedures are being followed consistently in order to safeguard the Company&rsquo;s assets, verify the accuracy and reliability of its data, and promote adherence to the prescribed policies, resulting in recommendations that add value for process improvements throughout all areas of the organization.</li>
<li>Individual must possess excellent attention to detail, strong writing and verbal communications skills, and be able to make critical decisions based on data analysis.</li>
<li>Highly collaborative individual with ability to influence others and build strong professional relationships.</li>
<li>Maintains a high degree of creditability, independence, integrity, confidentiality and trust.</li>
<li>Ability to work independently, make independent judgments and set priorities.</li>
<li>Demonstrated ability to research, compile and analyze regulatory and business information, assess compliance or other business risks, and provide feedback as to resolutions or recommendations for process improvement.</li>
<li>Proven ability to work effectively with diverse populations and a demonstrated commitment to fostering inclusion.</li>
<li>May require occasional travel.</li></ul><br>
<div>Harry Quadracci was determined to do things differently, and to do them better. In 1991, the visionary print manufacturing CEO founded QuadMed out of the belief that there had to be a better way to provide his employees with access to affordable, high-quality health care. And what started as doing the right thing, ended up sparking a health care revolution. Now 30 years later, we partner with employers across the nation to provide value-driven health and wellness services in or near the workplace. With a focus on breaking down cost, access and quality barriers, we empower employees and their families to live healthier, happier lives.</div><br>
<div>
<br>
</div><div>We offer excellent benefits to eligible employees, including 401(k), holidays, vacations and more.</div><br>
<div>
<br>
</div><div>QuadMed and Quad is proud to be an equal opportunity employer. We are committed to creating a place of belonging &mdash; a space where employees do not need to sacrifice who they are to exist and grow in our workplace. QuadMed and Quad does not discriminate on any unlawful basis including race, religion, color, national origin, disability, gender, gender identity, sexual orientation, age, marital status, veteran status, genetic information, or any other basis prohibited by applicable federal, state, or local laws. QuadMed and Quad also prohibits harassment of applicants and employees based on any of these protected categories.</div><br>
<div>
<br>
</div><div>Drug Free Workplace</div></div>

IT Security Analyst, QuadMed

Integral Federal

<div>Overview:
<div>
The Information Security Analyst provides TSA&rsquo;s Trusted Operations, Maintenance, Cybersecurity, Assurance, and Technology (TOMCAT) operational continuity, service excellence, security, and adaptive IT/OT Operations and Maintenance (O&amp;M) support.</div>
Responsibilities:
<ul><li>Ensure all TSA TOMCAT-supported systems and facilities comply with applicable DHS, other accrediting authority, TEMPEST instructions, policies, and directives.</li><li>Maintain a robust auditing process for TEMPEST activities, ensuring that all required security reviews, inspections, and audits are conducted in compliance with applicable policies and directives.</li><li>Responsible for utilizing DISA-approved tools, such as STIG Viewer and Security Content Automation Protocol (SCAP), to facilitate the assessment, implementation, and reporting of STIG compliance</li><li>Ensure and monitor compliance with all applicable vulnerability directives, including Information Assurance Vulnerability Assessment (IAVA), IA Vulnerability Bulletin (IAVB), Technical Orders (TO), and Time Compliance Networking Orders (TCNOs). Provide support to ensure all systems remain in compliance with established security requirements.</li><li>Ensure the timely and thorough validation of all applicable Security Technical Implementation Guides (STIGs) across systems, software, and configurations.</li></ul>
Qualifications:
<div><b>
Required:</b></div><div></div><ul><li><br>
Bachelor&rsquo;s Degree in IT related degree with 4 years of experience OR Bachelor's Degree with a minimum of 6 years of relevant experience</li><li>2 years of experience conducting TEMPEST performing compliance activities with applicable accrediting authority, TEMPEST instructions, policies, and directives.</li><li>Have and maintain a Certified Information Systems Security Professional (CISSP) certification.</li><li>Registered IAT Level II baseline certification: either CCNA Security, CySA+**, GICSP, GSEC, Security+CE, CND, and SSCP (preferred Security+ CE certificate)</li><li>Secret Clearance</li></ul>
Company Overview:
<div>
Integral partners with federal defense, intelligence, and civilian leaders to tackle their most important challenges and deliver positive outcomes. Since our founding in 1998, we have helped clients leverage existing and emerging technologies to transform their enterprises, empower growth, drive innovation, and build sustainable success. The forward-leaning solutions we deliver are tailored to each mission with a focus on keeping our nation safe and secure.</div><div></div><div><br>
Integral is headquartered in McLean, VA and serves clients throughout the country.</div><div></div><div><br>
We offer a comprehensive total rewards package including paid parental leave and immediate vesting in our 401(k). Give us a try and become part of a curated group of professionals at Integral Federal!</div><div></div><div><br>
Our package also includes:</div><ul><li>Medical, Dental &amp; Vision Insurance</li><li>Flexible Spending Accounts</li><li>Short-Term and Long-Term Disability Insurance</li><li>Life Insurance</li><li>Paid Time Off &amp; Holidays</li><li>Earned Bonuses &amp; Awards</li><li>Professional Training Reimbursement</li><li>Employee Assistance Program</li></ul><div></div><div><br>
Equal Opportunity Employer/Protected Veteran/Disability</div></div>

Information Security Analyst

ISSE SERVICES LLC

<div><p><b>SENIOR CYBER SECURITY ANALYST III (ISSM)</b></p><br>
<p></p>
<p><b>
This is a HYBRID position, not fully remote.</b></p>
<p><b>
Only apply if you have a current security clearance.</b></p><br>
<p></p>
<p><b>
Location:</b> Clearfield, UT</p>
<p>
The Cybersecurity Analyst is a key member of the Cybersecurity team and works closely with our customers across functional teams to provide compliance assessments and help engineer secure solutions as they are being developed.</p><br>
<p></p>
<p><b>
Essential Duties and Job Functions</b></p>
<ul><li>Assist customers design, engineer, and implement technical solutions</li></ul>
<ul><li>Lead teams of cybersecurity engineers and analysts in developing solutions across multiple DoD programs</li></ul>
<ul><li>Coordinate with Risk Management Framework team to ensure design meets specified requirements</li></ul>
<ul><li>Coordinate with DoD agencies to ensure solutions meet specific security guidelines</li></ul>
<ul><li>Conduct research, review documentation and provide input for Risk Management Framework packages to the Government for review and approval</li></ul>
<ul><li>Review Risk Management Framework documentation for completeness and readiness for certification analysis</li></ul>
<ul><li>Coordinate with the program team to gather artifacts and assist the Government in resolving issues precluding the program from receiving an Authority To Operate</li></ul>
<ul><li>Assist with FISMA compliance audits and provide status updates to the PM</li></ul>
<ul><li>Perform regular STIG and vulnerability analysis in compliance with DoD guidelines</li></ul>
<ul><li>Review compliance with current Cybersecurity policy, regulations, and directives to ensure secure configuration and operation of all operated and maintained IT assets, recommending corrective actions as required</li></ul>
<ul><li>Assist customers developing new system to design and engineer the systems to meet current cyber security requirements and best practices</li></ul><br>
<p></p>
<p><b>
Knowledge, Experience and Skills</b></p>
<ul><li>Minimum seven (7) years of experience in an Information Security position or IT Audit role with a background in performing security risk assessments</li></ul>
<ul><li>Experience with system design across multiple areas of operations (AAA, Operating Systems, network layout and design&hellip;)</li></ul>
<ul><li>Requirements gap analysis/traceability</li></ul>
<ul><li>Proven ability to create and maintain effective documentation, including policies, processes and procedures</li></ul>
<ul><li>Experience drawing Topology, Data Flow, and Boundary diagrams</li></ul>
<ul><li>Strong understanding of security concepts and detailed implementation including using NIST 800-53r4 controls as a framework</li></ul>
<ul><li>Deep understanding of how to tailor security implementation based on mission and threats</li></ul>
<ul><li>Knowledge of security and IT general controls for application development and management</li></ul>
<ul><li>Good communications skills, both verbal and written, as well as the ability to communicate well with people in a variety of positions, roles and levels</li></ul>
<ul><li>Professional, self-motivated and a strong sense of urgency.</li></ul>
<ul><li>Ability to provide technical direction to more junior team members</li></ul>
<p><b>
Required</b></p>
<ul><li>CISSP, CISSP-ISSEP, CISSP-ISSAP</li></ul>
<ul><li>Active DoD SECRET clearance (ability to gain Top Secret)</li></ul><br>
<p></p>
<p><b>
Preferred</b></p>
<ul><li>BS/BA degree or an equivalent combination of education and experience</li></ul>
<ul><li>Training in Risk Management or IT Audit Methodology strongly desired</li></ul><p></p><p><b><br>
Excellent Benefits Package</b></p>
<ul><li>
401(k) matching</li></ul>
<ul><li>Dental insurance</li></ul>
<ul><li>Health insurance</li></ul>
<ul><li>Life insurance</li></ul>
<ul><li>Short-term and Long-term disability</li></ul>
<ul><li>Paid time off</li></ul></div>

Senior Cybersecurity Information Analyst

City of Tacoma

<div><div><div><h2 class="jobSectionHeader"><b>Position Description</b></h2></div><br>
<div><p><br>
<br>
Tacoma Power's Power Shared Services Section is seeking an experienced Physical Senior Security Support Analyst to join their team! In this role you will assist with functions that are critical in safeguarding Tacoma Public Utilities assets and ensuring compliance with federal standards in the energy industry. The successful candidate, preferably holding Certified Protection Professional (CPP) and Physical Security Professional (PSP) certifications, will be the primary Subject Matter Expert for NERC CIP-003-8 and FERC D2 SI physical security requirements.</p><p>
In this critical position, the Physical Senior Security Support Analyst will be responsible for the meticulous management and regulated documentation of physical security plans, programs, and maps. The role involves ensuring strict adherence to NERC and FERC requirements, particularly NERC CIP-003-8 and FERC D2 SI, to maintain Tacoma Power's compliance and mitigate the risk of substantial monetary penalties. Additionally, the position will provide valuable assistance with other applicable reliability standards, with a notable focus on NERC CIP-006. Join our team and contribute your expertise to the essential mission of protecting our assets and maintaining regulatory compliance in the dynamic energy industry.</p><b><br>
Responsibilities Include</b><b>:</b><br>
Compliance Coordination<ul><li>
Develop, audit, and revise security documents for Tacoma Power&rsquo;s 7 Hydropower Projects, encompassing annual compliance certifications, vulnerability assessments, threat assessments, security plans, and physical security checklists.</li><li>
Serve as the primary reporting expert for security incidents and suspicious activities, adhering to 18 CFR 12.10, and report to the FERC D2SI Security Branch. Coordinate and actively participate in FERC Physical Security Inspections, annual drills, and Emergency Action Plan (EAP) exercises.</li><li>
Collaborate with Tacoma Power's Dam Safety group to provide responses and status reports, ensuring the submission of follow-up reports and recommendations to FERC on physical security-related matters. Manage compliance activities resulting from exercises, inspections, and audits related to physical security recommendations.</li></ul>
Security Plan Maintenance<ul><li>
Manage the maintenance of security processes, policies, plans, and procedures for TPU properties governed by NERC CIP-003-8 federal standards to ensure proper security levels and federal compliance, avoiding financial penalties.</li><li>
Act as the primary subject matter expert in maintaining Tacoma Power's CIP low impact physical security plans, including detailed maps and critical asset inventories, crucial for protecting assets and ensuring compliance.</li><li>
Monitor and respond to the CIP low impact key/lock replacement program in accordance with Tacoma Power Staff Procedure E-4, ensuring effective security measures are consistently upheld.</li></ul></div><br>
<p></p>
<div><h2 class="jobSectionHeader"><b>Qualifications</b></h2></div>
<div><div><b>Minimum Education*</b><br>
Bachelor's degree in business or public administration, criminal justice or directly related field<br>
<br>
<b>Minimum Experience*</b><br>
4 years of security program administration, including administration and coordination of electronic security systems and/or directly related field<br>
<br>
<b>Licensing, Certifications and Other Requirements</b><br>
Washington State Driver's License<br>
<br>
This position will require individuals to complete annual training and pass a comprehensive personal risk assessment (background check) prior to employment and every five years thereafter as required by federal regulatory requirements (NERC-CIP)<br>
<br>
<ul><li>Equivalency: 1 year of experience = 1 year of education</li></ul><br>
<b><i>
If you have a less traditional background, we want to hear about your transferrable skills and experience. We value a variety of perspectives and are excited to see what you bring to the table.</i></b></div></div>
<div><h2 class="jobSectionHeader"><b>Selection Process &amp; Supplemental Information</b></h2></div>
<p></p><div><p>This recruitment is being managed by Kye Merritt, if you would like to be notified of similar opportunities or stay connected with things going on at Tacoma Public Utilities and the City of Tacoma, connect with me on LinkedIn!</p><p><b>
Compensation &amp; Benefits</b></p><p>
Pay Details:</p><p>
Annual Salary: $98,280.00 - $138,320.00</p><p>
Employee Benefits | City of Tacoma</p><p><b>
Tacoma Power</b><br>
Tacoma Power is an almost 100% hydroelectric, municipally-owned public power utility, located in Tacoma. We serve approximately 180,000 customers as one of the three operating divisions of Tacoma Public Utilities, alongside Tacoma Water and Tacoma Rail. As one of the most livable, walkable cities in the country, you'll find that Tacoma is a great fit for all interests with places to bike, run, hike, and explore, the perks of a big city, and the charm of a small town. We welcome you to take a look at our website and discover how the City of Tacoma can make your next career move part of our combined destiny:<br>
http://www.cityoftacoma.org/<br>
https://www.mytpu.org/<br>
http://www.traveltacoma.com/</p><p><b>
City of Tacoma&rsquo;s Commitment to Diversity, Equity, and Inclusion</b></p><p><b>
A Commitment to Equity &amp; Diversity</b><br>
 At the City of Tacoma, we're on a mission to make our workforce as diverse and inclusive as the community we serve. We actively seek out candidates from a wide range of backgrounds and cultures. Join our team at the City of Tacoma and help us build a more vibrant, inclusive, and equitable community for all.</p><p><i>
If you have a less traditional background, we want to hear about your transferrable skills and experience. We value a variety of perspectives and are excited to see what you bring to the table.</i></p><p><b>
The Community</b></p><p>
Tacoma is centrally located just 32 miles south of the city of Seattle and 31 miles north of the state capital, Olympia. The City of Tacoma is also home to the Port of Tacoma, which is among the largest container ports in the United States. Like most cities in the northwest, Tacoma is surrounded by beautiful nature, offering residents many opportunities for outdoor adventures.</p><p>
Largely suburban in nature with a small, but dense, urban core, Tacoma is home to numerous institutes of higher learning that attract students from across the country. The University of Washington Tacoma, Pacific Lutheran University, University of Puget Sound, a satellite campus of the Evergreen State College, three community/technical colleges, and several trade and business schools are within Tacoma's geographic area. Downtown's Cultural District is the site of the Washington State History Museum, Museum of Glass, the Tacoma Art Museum, and America's Car Museum.</p><p>
With its affordable housing and distinctive neighborhoods and business districts, the city has been recognized numerous times as a best city to live in the nation. To see a few of the great things Tacoma has to offer, view this YouTube Video!</p><p><b>
View this exciting video to learn more about the City of Tacoma: </b>https://www.youtube.com/watch?v=2n5MWl8KFvI</p><p><b>
Application Process</b></p><p>
Interested individuals should apply online by completing the application and attaching a resume and cover letter by the closing date and time listed on the job announcement. Applications received without attaching the required materials may not progress in the selection process. Applicants who have the strongest backgrounds related to the responsibilities of this position may be invited to participate in the interview process, which may include a work problem. Appointment is subject to passing a background check.</p><p>
Get Assistance</p><p>
For assistance with the application process or questions regarding this job announcement please contact the Human Resources office at (253) 591-5400 by 4:00 p.m. of the closing date of the job announcement.</p><p>
For technical difficulties using the NEOGOV system, call the applicant support line at 1-855-524-5627 between 6:00a.m. and 5:00 p.m. Pacific Standard Time. This will allow us to assist you before the job announcement closes.</p><p>
Communication with the City of Tacoma</p><p>
We primarily communicate via email during the application process. Emails from Tacoma.gov and/or governmentjobs.com should be placed on your safe domain list to ensure that you receive notifications in a timely manner. As a precaution, you may also want to check your junk email folders.</p><p>
Note: The provisions of this job announcement do not constitute an expressed or implied contract. Any provision contained herein may be modified and/or revoked without notice.</p></div></div></div><p></p>

Physical Security Analyst, Senior

General Dynamics Information Technology

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.</p><p>
Job Description</p><div><p>
The Program Security Representative&rsquo;s primary function is to provide multi-discipline security support for one or more of the customer&rsquo;s Special Access Programs (SAPs). The position will provide &ldquo;day-to-day&rdquo; multi-discipline analysis for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.</p><p><br>
Performance shall include:</p><ul><li><p>
Ensure strict adherence to the provisions of the NISPOM, its Supplement, the DoD Overprint, DCID, ICD, and SAP policy.</p></li><li><p>
Assist in developing and executing approved policies and procedures for safeguarding Special Access.</p></li><li><p>
Program (SAP), Sensitive Compartmented Information (SCI) and collateral data in support of US military operations.</p></li><li><p>
Provide day-to-day security support that includes continuous assessment of procedures to identify shortfalls and provide appropriate recommendations for revising and improving security policies, procedures, and systems.</p></li><li><p>
Identify vulnerabilities, threats, and risks to test, training, and operational activities.</p></li><li><p>
Assist in developing, implementing, and training the Operations Security program.</p></li><li><p>
Assist in providing contractor and subordinate facility assistance and oversight.</p></li><li><p>
Brief all levels of personnel, both in the government and senior civilian services, on a variety of security related topics.</p></li><li><p>
Conduct and document SAP facility compliance reviews, follow-on facility reviews, and facility close-outs.</p></li><li><p>
Monitor, report and track all corrective actions resulting from compliance reviews.</p></li><li><p>
Ensure timely notification of pertinent security matters to program technical and management staff.</p></li><li><p>
Conduct exploration of any loss, compromise, or suspected compromise of classified and/or sensitive information, including conducting preliminary inquiries and generating damage assessments resulting from the loss of classified information.</p></li><li><p>
Coordinate with SAP security personnel to ensure lessons learned are incorporated into the curriculum for the SAP security education &amp; awareness program.</p></li><li><p>
Provide leadership, mentoring, and oversight of team members.</p></li></ul><p><br>
Experience:</p><ul><li><p>
10+ years related experience.</p></li><li><p>
2+ years SAP experience required.</p></li></ul><p><br>
Education:</p><ul><li><p>
Bachelor&rsquo;s degree in a related area OR Associate&rsquo;s degree in a related area + 2 years&rsquo; experience OR equivalent experience (4 years)</p></li></ul><p><br>
Experience Education Equivalents:</p><ul><li><p>
Security Fundamentals Professional Certification (SFPC) counts towards 3 years of experience.</p></li><li><p>
Special Program Security Certification (SPSC) counts towards 5 years of experience.</p></li><li><p>
Maximum equivalent experience for SPED Certifications is no more than 5 years</p></li></ul><p></p><p>
Clearance Required to Start:</p><ul><li><p>
TS/SCI required.</p></li><li><p>
Must be able to Attain &ndash; TS/SCI with CI Polygraph</p></li></ul><p></p><p>
GDIT IS YOUR PLACE:</p><ul><li><p>
401K with company match</p></li><li><p>
Comprehensive health and wellness packages</p></li><li><p>
Internal mobility team dedicated to helping you own your career</p></li><li><p>
Professional growth opportunities including paid education and certifications</p></li><li><p>
Cutting-edge technology you can learn from</p></li><li><p>
Rest and recharge with extra paid vacation and holidays</p></li></ul><p></p><p><br>
#AirForceSAPOpportunities #PSR</p>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
10 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification<p>
GICSP: Global Industrial Cyber Security Professional - Global Information Assurance Certification (GIAC)</p><p>
GSEC: GIAC Security Essentials Certification - Global Information Assurance Certification (GIAC) - Global Information Assurance Certification (GIAC)</p><p>
Cisco Certified Network Associate (CCNA) Security - Cisco - Cisco</p></div><div></div><div>
Travel Required<div>
10-25%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $137,870 - $186,530. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

Program Security Representative (PSR) III

Search 10000+ Security compliance analyst jobs near you this March. New roles added regularly across leading industries. Apply today.