System Analyst 3

Minimum Required Experience:
12+ years

of deep focus on:

Governance, Risk, and Compliance (GRC)
Enterprise Security & Security Architecture
Vulnerability Management & Penetration Testing
Cloud Security & Hybrid Environments

10+ years

of:

Owning SSP (System Security Plan) development end-to-end
Hands-on experience with CMS MARS-E v2.2 or comparable federal/state security frameworks
Control implementation documentation
Audit evidence collection & validation
POA&M creation, tracking, and remediation management

8+ years

of:

Translating technical security issues into compliance-aligned remediation actions
Stakeholder management across security, infrastructure, and application teams
Executive-level written and verbal communication
Knowledge of NIST 800-53, NIST RMF, and privacy controls
Secure SDLC and DevSecOps practices

Preferred Experience:

Experience in multi-vendor, multi-platform environments
Proven track record of reducing repeat audit findings and improving compliance maturity
Experience mentoring teams on security governance best practices
Experience supporting HHSC systems, including SSP development and compliance