System Analyst 3

Minimum Required Experience:

12+ years of deep focus on:

Governance, Risk, and Compliance (GRC)

Enterprise Security & Security Architecture

Vulnerability Management & Penetration Testing

Cloud Security & Hybrid Environments

10+ years of:

Owning SSP (System Security Plan) development end-to-end

Hands-on experience with CMS MARS-E v2.2 or comparable federal/state security frameworks

Control implementation documentation

Audit evidence collection & validation

POA&M creation, tracking, and remediation management

8+ years of:

Translating technical security issues into compliance-aligned remediation actions

Stakeholder management across security, infrastructure, and application teams

Executive-level written and verbal communication

Knowledge of NIST 800-53, NIST RMF, and privacy controls

Secure SDLC and DevSecOps practices

Preferred Experience:

Experience in multi-vendor, multi-platform environments

Proven track record of reducing repeat audit findings and improving compliance maturity

Experience mentoring teams on security governance best practices

Experience supporting HHSC systems, including SSP development and compliance