Apply on Employer Site

Oracle · 2 months ago

Principal Information Security Compliance Analyst

Nashville, TN, United States

Full-time

Onsite

Senior Level, Lead/Staff

3+ years exp

Oracle is a leading technology company, and they are seeking a Principal Information Security Compliance Analyst. The successful candidate will be responsible for maintaining, monitoring, and supporting FedRAMP and DoD cloud authorization for US government agencies and their subcontractors, ensuring that documentation is up-to-date and that processes and policies are appropriate.

Data GovernanceData ManagementEnterprise SoftwareInformation TechnologySaaSSoftware

No H1B

U.S. Citizen Only

Responsibilities

Maintaining, monitoring and supporting FedRAMP and DoD cloud authorization supporting US government agencies and their subcontractors

Championing the upkeep of authorization throughout the business

Working with others to ensure documentation is kept up-to-date and processes and policies are appropriate

Qualification

FedRAMPDoD Risk Management FrameworkNIST 800-53DISA STIGsSecurity principlesSecurity systemsApplication securityMulti-taskingProblem-solvingCommunication skillsAttention to detail

Required

Experience with FedRAMP and Department of Defense (DoD) Risk Management Framework (RMF) and risk assessment tools

Detailed understanding of the NIST 800-53 control catalog, FedRAMP Security Assessment Framework (SAF), and DoD Cloud Computing Security Requirements Guide (SRG)

Working experience with DISA Security Technical Implementation Guides STIGs

Thorough understanding of the latest security principles, techniques, and protocols

Fundamental understanding of security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc

Ability to communicate security issues to peers, management, customers, and end-users

Excellent problem-solving skills and ability to work under pressure

US Citizens with ability to obtain a US security clearance

Preferred

Working knowledge of production information system in a global IaaS, PaaS, SaaS environment

Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols

Knowledge of standards and requirements with application security

Fundamental Understanding of the OWASP (Open Web Application Security Project) top 10

Knowledge and expertise in disciplines/ business functions and projects of risk, information security, business continuity, quality and environment management

A strong multi-tasker with a keen eye for detail

Organized and thrive in fast-paced, high-stress scenarios