Job Summary: The Senior Information Security Risk Assessor - PeopleSoft FSCM will lead ... Develop SEC530 risk-assessment methodology, scoring criteria, and risk-treatment categories.
Quick apply
Job Summary: The Senior Information Security Risk Assessor - PeopleSoft FSCM will lead ... Develop SEC530 risk-assessment methodology, scoring criteria, and risk-treatment categories.
Risk Assessment Analyst with Security Clearance
Alexandria, VA · On-site
$90K - $140K/yr
Risk Assessment Analyst Location: Alexandria, VA Work Type: Full-Time / Hybrid Remote Work: 50 ... As an information security risk specialist on our team, you'll work with industry partners to ...
Risk Assessment Analyst with Security Clearance
Alexandria, VA · On-site
$90K - $140K/yr
Risk Assessment Analyst Location: Alexandria, VA Work Type: Full-Time / Hybrid Remote Work: 50 ... As an information security risk specialist on our team, you'll work with industry partners to ...
An information system security risk assessment should also be performed in compliance with SEC501.09 and SEC520.00 using the risk assessment template: ( 1.Appeals and Rulings 2.FACSYS 3.Fraud ...
An information system security risk assessment should also be performed in compliance with SEC501.09 and SEC520.00 using the risk assessment template: ( 1.Appeals and Rulings 2.FACSYS 3.Fraud ...
Risk Assessor
Richmond, VA · On-site
An information system security risk assessment should also be performed in compliance with SEC501.09 and SEC520.00 using the risk assessment template: ( 1.Appeals and Rulings 2.FACSYS 3.Fraud ...
Risk Assessor
Richmond, VA · On-site
An information system security risk assessment should also be performed in compliance with SEC501.09 and SEC520.00 using the risk assessment template: ( 1.Appeals and Rulings 2.FACSYS 3.Fraud ...
Physical Security Risk & Compliance Analyst (TS/SCI #26-127) with Security Clearance
Arlington, VA · On-site
This position provides expert analysis of physical security programs by conducting inspections, compliance assessments, risk evaluations, and vulnerability analyses to ensure adherence to applicable ...
Physical Security Risk & Compliance Analyst (TS/SCI #26-127) with Security Clearance
Arlington, VA · On-site
This position provides expert analysis of physical security programs by conducting inspections, compliance assessments, risk evaluations, and vulnerability analyses to ensure adherence to applicable ...
Prepare and present risk assessment reports to support business decisions, risk acceptance processes, and executive-level discussions * Manage third-party and vendor security assessments, including ...
Quick apply
Prepare and present risk assessment reports to support business decisions, risk acceptance processes, and executive-level discussions * Manage third-party and vendor security assessments, including ...
Prepare and present risk assessment reports to support business decisions, risk acceptance processes, and executive-level discussions * Manage third-party and vendor security assessments, including ...
Quick apply
Prepare and present risk assessment reports to support business decisions, risk acceptance processes, and executive-level discussions * Manage third-party and vendor security assessments, including ...
Evaluate cybersecurity risk assessments and perform Supply Chain Risk Management (SCRM) analysis ... Applicants selected will be subject to a government security investigation and must meet ...
Evaluate cybersecurity risk assessments and perform Supply Chain Risk Management (SCRM) analysis ... Applicants selected will be subject to a government security investigation and must meet ...
Conduct security risk assessments for third parties - including cloud service providers, SaaS platforms, technology partners, and infrastructure providers - across the third-party lifecycle (intake ...
Conduct security risk assessments for third parties - including cloud service providers, SaaS platforms, technology partners, and infrastructure providers - across the third-party lifecycle (intake ...
SAP Security Risk & Compliance Analyst (TS/SCI #26-126) with Security Clearance
Arlington, VA · On-site
This position provides comprehensive security compliance, risk management, and assessment support by evaluating security programs against applicable government regulations, customer requirements, and ...
SAP Security Risk & Compliance Analyst (TS/SCI #26-126) with Security Clearance
Arlington, VA · On-site
This position provides comprehensive security compliance, risk management, and assessment support by evaluating security programs against applicable government regulations, customer requirements, and ...
Operating at the intersection of security engineering, risk assessment, and compliance, the SRE transforms federal mandates (e.g., NIST RMF, FISMA, EO 14028, OMB directives) into measurable security ...
Operating at the intersection of security engineering, risk assessment, and compliance, the SRE transforms federal mandates (e.g., NIST RMF, FISMA, EO 14028, OMB directives) into measurable security ...
Operating at the intersection of security engineering, risk assessment, and compliance, the SRE transforms federal mandates (e.g., NIST RMF, FISMA, EO 14028, OMB directives) into measurable security ...
New
Operating at the intersection of security engineering, risk assessment, and compliance, the SRE transforms federal mandates (e.g., NIST RMF, FISMA, EO 14028, OMB directives) into measurable security ...
New
Operating at the intersection of security engineering, risk assessment, and compliance, the SRE transforms federal mandates (e.g., NIST RMF, FISMA, EO 14028, OMB directives) into measurable security ...
Operating at the intersection of security engineering, risk assessment, and compliance, the SRE transforms federal mandates (e.g., NIST RMF, FISMA, EO 14028, OMB directives) into measurable security ...
The Research and Technology Protection (RTP) team provides day-to-day security classification guidance and risk assessment for classified and controlled unclassified GEOINT campaigns and technology ...
The Research and Technology Protection (RTP) team provides day-to-day security classification guidance and risk assessment for classified and controlled unclassified GEOINT campaigns and technology ...
Security Solutions: Deliver top-tier assessments for multinational clients in complex regions. * Intelligence & Security Risk Reporting : Collect, evaluate, and disseminate open-source and ...
Security Solutions: Deliver top-tier assessments for multinational clients in complex regions. * Intelligence & Security Risk Reporting : Collect, evaluate, and disseminate open-source and ...
The Research and Technology Protection (RTP) team provides day-to-day security classification guidance and risk assessment for classified and controlled unclassified GEOINT campaigns and technology ...
Quick apply
The Research and Technology Protection (RTP) team provides day-to-day security classification guidance and risk assessment for classified and controlled unclassified GEOINT campaigns and technology ...
The Research and Technology Protection (RTP) team provides day-to-day security classification guidance and risk assessment for classified and controlled unclassified GEOINT campaigns and technology ...
The Research and Technology Protection (RTP) team provides day-to-day security classification guidance and risk assessment for classified and controlled unclassified GEOINT campaigns and technology ...
Perform overall security risk assessment for NGA's research efforts. * Provide pros and cons associated with proposed risk mitigation options. * Assist with reviewing and establishing additional ...
Perform overall security risk assessment for NGA's research efforts. * Provide pros and cons associated with proposed risk mitigation options. * Assist with reviewing and establishing additional ...
Perform overall security risk assessment for NGA's research efforts. * Provide pros and cons associated with proposed risk mitigation options. * Assist with reviewing and establishing additional ...
Perform overall security risk assessment for NGA's research efforts. * Provide pros and cons associated with proposed risk mitigation options. * Assist with reviewing and establishing additional ...
Perform overall security risk assessment for NGA's research efforts. * Provide pros and cons associated with proposed risk mitigation options. * Assist with reviewing and establishing additional ...
Quick apply
Perform overall security risk assessment for NGA's research efforts. * Provide pros and cons associated with proposed risk mitigation options. * Assist with reviewing and establishing additional ...
Temporary Security Risk Assessment information
What is the difference between Temporary Security Risk Assessment vs Security Analyst?
| Aspect | Temporary Security Risk Assessment | Security Analyst |
|---|---|---|
| Credentials | Certifications like CISSP, CISA often preferred | Same certifications typically required |
| Work Environment | Project-based, short-term assessments | Ongoing security monitoring and analysis |
| Industry Usage | Used during specific projects or audits | Continuous security operations in organizations |
| Search & Comparison Intent | Focus on temporary assessments and risk evaluations | Focus on ongoing security analysis roles |
The main difference is that a Temporary Security Risk Assessment is a short-term, project-specific evaluation of security risks, often used during audits or specific initiatives. In contrast, a Security Analyst performs ongoing security monitoring and analysis within an organization. Both roles require similar certifications and work in security-focused environments, but their scope and duration differ significantly.
What are the most commonly searched types of Security Risk Assessment jobs in Virginia? The most popular types of Security Risk Assessment jobs in Virginia are:
What are popular job titles related to Temporary Security Risk Assessment jobs in Virginia? For Temporary Security Risk Assessment jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Temporary Security Risk Assessment jobs in Virginia look for? The top searched job categories for Temporary Security Risk Assessment jobs in Virginia are:
What cities in Virginia are hiring for Temporary Security Risk Assessment jobs? Cities in Virginia with the most Temporary Security Risk Assessment job openings:
Job description
Job Summary:
The Senior Information Security Risk Assessor – PeopleSoft FSCM will lead comprehensive SEC530 risk assessments for PeopleSoft Financials and related business functions. This role involves identifying and evaluating risks, controls, and impacts to ensure the confidentiality, integrity, and availability of sensitive financial and operational data. The assessor will develop risk methodologies, risk registers, and corrective action plans while collaborating closely with IT security auditors and stakeholders.
Responsibilities:- Develop SEC530 risk-assessment methodology, scoring criteria, and risk-treatment categories.
- Define system boundaries, critical business processes, sensitive data, technical dependencies, and third-party services.
- Conduct interviews and risk workshops with technical, security, fiscal, system-owner, and executive stakeholders.
- Identify and evaluate risks related to access control, segregation of duties, unauthorized changes, legacy customizations, and interface security.
- Assess risks involving PeopleSoft roles, permissions, custom code, database privileges, and environment separation.
- Review control-testing results and assign inherent and residual risk ratings.
- Develop and maintain a detailed risk register documenting threats, vulnerabilities, controls, and treatment recommendations.
- Prioritize corrective actions and support development of remediation plans and risk acceptance statements.
- Prepare and present draft and final risk-assessment reports to leadership and system owners.
- Participate in onsite kickoff, draft-review, and final wrap-up meetings.
- Active CISSP or CISA certification.
- Minimum three years of relevant cybersecurity or IT risk-assessment experience.
- Experience leading formal application, system, or enterprise technology risk assessments.
- Proficiency in identifying threats, vulnerabilities, business impacts, and risk levels.
- Experience developing risk registers and formal risk-assessment reports.
- Knowledge of systems handling sensitive financial, tax, payment, vendor, or personally identifiable information.
- Ability to provide a reference from another state government agency.
- Availability for onsite meetings in Richmond and ability to work from approved U.S.-based locations.
- Understanding of SEC530 or comparable government risk-assessment standards.
- Five or more years of cybersecurity risk-assessment experience.
- Prior experience with SEC530, Commonwealth of Virginia, or VITA risk assessments.
- Expertise in PeopleSoft FSCM, PeopleSoft Financials, Oracle ERP, and financial-system risk assessments.
- Familiarity with Oracle 19c, PeopleTools, WebLogic, Windows, and Linux environments.
- Experience assessing Active Directory/LDAP, SFTP, PowerShell, BizTalk, Integration Broker, and database links.
- Knowledge of vendor, payment, tax, procurement, accounting, or billing system risks.
- Experience evaluating shared and inherited controls in government-hosted environments.
- Additional certifications such as CRISC, CISM, CCSP, CGEIT, or ISO 27001 Lead Auditor.
- Mandatory background check and key-personnel status under the SOR.
- Must be able to perform all work from approved U.S.-based locations.
- Reference from another state government agency required.
- Availability for required onsite meetings in Richmond, VA.
- Work schedule includes participation in onsite kickoff, draft-review, and final wrap-up meetings.
- Typical work performed remotely with required onsite presence as specified.
vTech Solution Inc. is a Managed IT Services firm headquartered in Washington, DC. They specialize in a range of services including cloud computing, managed network security, and cybersecurity. Their primary focus is on providing human-centered IT solutions for government and business sectors, including federal, state, local, and education (SLED) groups, as well as commercial organizations.
vTech Solution offers services such as:
- Managed Security Services: Implementing zero-trust security frameworks to prevent cyber threats in real-time.
- Multi-cloud Management Services: Helping businesses digitally transform with smart cloud technologies.
- Infrastructure Managed Services: Creating resilient and secure infrastructure management.
- Professional Services: Providing expertise for mission-critical programs.
- Productivity and Communications: Ensuring secure and confident business connectivity from anywhere
About vTech Solution
Sourced by ZipRecruiter
vTech is a Managed IT Services firm based out of Washington DC with a primary focus on Cloud Computing and Managed Network Security.
Industry
It services
Company size
51 - 200 Employees
Headquarters location
Washington, DC, US
Year founded
2006