Information Security Analyst

About the role

CGI Federal is looking for an Information Security Analyst to lead NIST SP 800‑53 compliance across cloud‑based and on‑premises environments. The analyst will translate control requirements into technical solutions, evaluate security impacts of system changes, and support incident management.

Key responsibilities

• Lead implementation and validation of NIST SP 800‑53 security controls.
• Advise system owners and engineering teams on control optimization and gap remediation.
• Conduct Security Impact Analyses for proposed system changes.
• Develop and maintain System Security Plans, Privacy Impact Assessments, Contingency Plans, Incident Response Plans, and Configuration Management Plans.
• Analyze vulnerability assessment findings, manage POA&Ms, and track remediation progress.
• Review audit logs using Splunk and Azure Sentinel, detect anomalies, and support compliance reporting.
• Support incident response activities, create training sessions, and document lessons learned.
• Provide technical recommendations for continuous security improvement.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• Minimum 1 year of professional experience in information security or related education.

Required skills

• NIST SP 800‑53 compliance
• Vulnerability management and POA&M tracking
• Security Impact Analysis
• Incident response and remediation
• Log review with Splunk and Azure Sentinel