Cyber Compliance Reporting

The Opportunity:

As a Cyber Compliance Reporting Analyst, youwill be responsible for drafting and managing technical orders, tracking compliance, and analyzing cybersecurity vulnerabilitiessupporting the US Coast Guard. This role requires strong writing and communication skills, proficiency in Microsoft Office tools including Power BI, and a deep understanding of DoD terminology and cybersecurity frameworks such as NIST and RMF.Youmust possess an active DoD Secret Clearance, be DOD 8570 IAT II certified, and have experience with tools like Tenable Security Center, Tanium, and Microsoft Defender Endpoint. Thisposition involves coordinating cyber activities with external and internal entities, reviewing proposed solutions for compliance with federal and defense regulations, and assisting in the creation of white papers for course of action analysis.

Specific Areas of Responsibility:

• Solid writing and communications skills; ability to write Operational Orders, Cyber Task Ordersand other tasking mechanismsrelated to Information Technology.

• Strong Microsoft Office skills to include Word,Excel,PowerPoint,SharePoint, includingPowerBi.

• Strong knowledge of Department of Defense (DoD / DoW) terminology, acronyms and verbiagerelated to Cybersecurity, Information Technology andother Cyber related events.

• Track, verifyand enumerate metric related to inbound and outbound TASKORDs, CTO, EXORDs and other tasking mechanisms from DoD and DHS.

• Familiarity withPlans of Action and Milestones (POA&M)for securing IT vulnerabilities, exploits and weaknesses.

• Examine datasets and use investigative techniques to determine what systems are in compliance with or deviating from the known standard.

• Filter a dataset and conduct analysisin order toprovide theCustomerwith an explanation based on potential scenarios proposed by the Government or the Analyst

• Analyze data contained within multiple tools (e.g.Tanium, ACAS, etc.) to determine the potential attack surface of a vulnerability based on an understanding of the exploitability of the vulnerability and active and passive defenses used by the network.

• Differentiate between risk mitigation and risk remediation, the processes for each and how to manage and track both.

• Maintain datasets related to information systems and related data used by theorganization.

• Understand and communicate the difference between a threat, vulnerability and a risk.

• Assist in the creation and publication of technical orders to service customers; track the compliance and status of orders through their lifecycle in an Orders Management program.

• Track and acknowledge the receipt of vulnerabilitiesthrough a Orders Management program; analyze and reportthe compliance of vulnerabilities on affected assets

• Disseminate IAVM/ISVM notices and track compliance as directed by USCYBERCOM or CGCYBER.

• Assist with the coordination of and implementation of the IA program with a specific emphasis on the reporting, tracking and compliance of KPIs.

• Responsible for drafting management level reports detailing vulnerabilities released, compliant, and non-compliantas well as trending information across the enterprise.

• Review proposed solutions to ensure they meet Federal and Defense information technology regulations.

• Assist in researching product information to developing white papers for course of action analysis.

• Coordinate cyber activities with both external entities (DOD, DHS, and Commercial Industry) as well as internal USCG entities.

Qualifications:

Required:

• Must have active DoDSecret Clearance.

• Education: BA/BS or equivalent years of relevant experience.

• Relevant Years of Experience:7+

• Must be DOD 8570 IAT II certified.

• Candidate must have a strong working knowledge of MS tools such asWord,Excel,PowerPoint,SharePoint, andPowerBi.

• Experience withTenable Security Center,Tanium, Microsoft Defender Endpoint.

• A working knowledge and understanding of National Institute of Standards and Technology (NIST), Risk Management Framework (RMF), network security technologies, procedures and operational constructs.

Desired:

• Master’s degree.

• 4+ years of military experience.