Apply on Employer Site

NetSuite · 2 months ago

Principal Information Security Compliance Analyst

Nashville, TN, United States

Full-time

Onsite

Senior Level, Lead/Staff

3+ years exp

NetSuite is a leading provider of cloud-based business management software, and they are seeking a Principal Information Security Compliance Analyst. The successful candidate will be responsible for maintaining and supporting FedRAMP and DoD cloud authorization processes for US government agencies, ensuring that documentation is current and processes are effective.

Cloud ComputingComputerCRMiOSSaaSSoftware

No H1B

U.S. Citizen Only

Responsibilities

Maintaining, monitoring and supporting FedRAMP and DoD cloud authorization supporting US government agencies and their subcontractors

Championing the upkeep of authorization throughout the business, working with others to ensure documentation is kept up-to-date and processes and policies are appropriate

Qualification

FedRAMP experienceDoD RMF knowledgeNIST 800-53 understandingDISA STIGs experienceSecurity principles knowledgeSecurity systems understandingIaaS/PaaS/SaaS knowledgeWeb technologies familiarityOWASP top 10 understandingApplication security knowledgeMulti-tasking abilityCommunication skillsProblem-solving skillsOrganizational skills

Required

Experience with FedRAMP and Department of Defense (DoD) Risk Management Framework (RMF) and risk assessment tools

Detailed understanding of the NIST 800-53 control catalog, FedRAMP Security Assessment Framework (SAF), and DoD Cloud Computing Security Requirements Guide (SRG)

Working experience with DISA Security Technical Implementation Guides STIGs

Thorough understanding of the latest security principles, techniques, and protocols

Fundamental understanding of security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc

Ability to communicate security issues to peers, management, customers, and end-users

Excellent problem-solving skills and ability to work under pressure

US Citizens with ability to obtain a US security clearance

Preferred

Working knowledge of production information system in a global IaaS, PaaS, SaaS environment

Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols

Knowledge of standards and requirements with application security

Fundamental Understanding of the OWASP (Open Web Application Security Project) top 10

Knowledge and expertise in disciplines/ business functions and projects of risk, information security, business continuity, quality and environment management

A strong multi-tasker with a keen eye for detail

Organized and thrive in fast-paced, high-stress scenarios