IT - SCDHHS - Security Analyst - Consultant

Job Description

Position : Security Analyst

Location : Columbia, SC

Years of Exp : 10+Years

Contract Type : C2C / W2

Duration : 12+ Months

Candidate MUST be a SC resident or willing to relocate to SC prior to starting the role at their own expense.

Summary

We are seeking an experienced Security Analyst / Senior ISSO to oversee and actively participate in the day-to-day security and compliance operations of complex information systems. The ideal candidate will lead the establishment, implementation, and enhancement of Information Systems Security and Compliance efforts based on State / Agency Policy, Standards, and Regulatory Guidance such as FISMA, NIST, CMS MARS-E, HIPAA, and other applicable frameworks.

Key Responsibilities

• Serve as a senior cybersecurity consultant to leadership, business units, partners, and vendors.
• Lead and manage security and compliance programs, including CMS MARS-E, ARC-AMPE, or other FISMA RMF-compliant programs.
• Develop and maintain System Security Plans (SSPs), Privacy Impact Assessments (PIAs), Interconnection Security Agreements (ISAs), Computer Matching Agreements (CMAs), and related audit / assessment activities.
• Integrate RMF / A&A tasks into the System Development Life Cycle (SDLC).
• Perform architectural reviews, risk analysis, and security assessments for network design, information flow, system access, firewall rules, baseline configuration, and vulnerability management.
• Audit internal systems and third-party / vendor systems for compliance and security controls.
• Review and provide security input on contracts, data usage agreements, and related documentation.
• Act as a primary point of contact for external audits and assessments.
• Utilize tools such as Microsoft Office Suite, ticketing systems, eGRC platforms (e.g., Archer), Bizagi, Atlassian, and other relevant tools for documentation and reporting.
• Collaborate with stakeholders to recommend and implement security and compliance risk mitigation measures.

Required Skills

Preferred Skills

Requirements