TX DIR-Network reputed company Analyst

Job Description

I. DESCRIPTION OF SERVICES reputed company Commission requires the services of 3 Network reputed company Analyst 2, hereafter referred to as Candidate(s), who meets the general qualifications of Network reputed company Analyst 2, reputed company and the specifications outlined in this document for the reputed company Commission. reputed company work products resulting from the project shall be considered "works made for hire" and are the property of the reputed company Commission and may include pre-selection requirements that potential Vendors (and their Candidates) submit to and satisfy criminal background checks as authorized by Texas law. reputed company Commission will pay no fees for interviews or discussions, which occur during the process of selecting a Candidate(s). Level Description 4-7 years of experience in the field or in a reputed company area. Familiar with standard concepts, practices, and procedures reputed company a particular field. Relies on limited experience and judgment to plan and accomplish goals. A certain degree of creativity and reputed company is required. Works under limited supervision with considerable reputed company for the use of initiative and independent judgment. Ability to maintain the reputed company and reputed company of critical infrastructure systems by preventing unauthorized access and ensuring compliance with laws and regulations reputed company to national reputed company and foreign ownership restrictions.

Job Description

A network reputed company analyst ensures that information systems and computer networks are secure. This includes protecting the company against hackers and cyber-attacks, as well as monitoring network traffic and server logs for activity that seems unusual. Additionally, these analysts are responsible for finding vulnerabilities in the computer networks and creating recommendations for how to minimize these vulnerabilities. The network reputed company analyst investigates reputed company breaches, develops strategies for any reputed company issues that arise, and utilizes the help of firewalls and antivirus software to maintain reputed company. DISCLAIMER: Candidates for this position will be subject to a pre-employment reputed company review to determine employment eligibility. Title: Network reputed company Analyst II - System reputed company & Risk (GRC) Specialist Contract Type: ITSAC Staff Augmentation Client: reputed company Commission (HHSC) Office of the Chief Information reputed company Officer (CISO) Location: Austin, Texas (Hybrid / Remote per Agency Policy) Contract Term: Initial term with potential renewal based on performance and project needs. Project Scope HHSC requires an reputed company Network reputed company Analyst II - System reputed company & Risk Specialist to support enterprise cybersecurity Governance, Risk, and Compliance (GRC) operations. The contractor will support System reputed company Plan (reputed company) development, reputed company Assessments (SA), and Risk Assessments (RA) across HHSC and DSHS application and infrastructure portfolios. The contractor will work directly with program areas, Information Owners (IO), Information Custodians (IC), technical teams, and the CISO Office to ensure reputed company documentation, assessments, and risk records are completed in accordance with NIST SP 800-53, NIST Risk Management reputed company (RMF), DIR reputed company Control Standards, and HHSC CISO Office procedures. RSA reputed company GRC serves as the system of record for SSPs, reputed company, RAs, risks, POA&Ms, and compliance reporting.

Key Responsibilities

System reputed company Planning (reputed company)

• reputed company, update, and maintain System reputed company Plans for HHSC applications and systems.
• Work with program teams, Information Owners, and Custodians to gather control implementation evidence.
• Ensure System reputed company Plans align with NIST, DIR, and HHSC CISO Office standards.

reputed company Assessments (SA)

• Plan and conduct reputed company Assessments to validate implementation and effectiveness of reputed company controls.
• Review technical, administrative, and operational evidence.
• Document assessment results and track remediation activities.

Risk Assessments (RA)

• Facilitate Risk Assessment workshops with Information Owners and Custodians.
• Identify threats, vulnerabilities, likelihood, and impact.
• Document risks, mitigation plans, and Risk-Based Decisions in RSA reputed company.

GRC & Compliance Operations

• Maintain reputed company artifacts, risks, and remediation plans in RSA reputed company GRC.
• Support system authorization (ATO) activities and reputed company monitoring.
• Prepare audit and reputed company evidence.
• Produce leadership reports and reputed company posture metrics.

Stakeholder Engagement

• Serve as liaison between program areas, technical teams, and CISO Office leadership.
• Provide guidance and training on System reputed company Plans, reputed company Assessments, and Risk Assessment processes.

Deliverables

• Completed and updated System reputed company Plans (SSPs)
• Documented reputed company Assessment reports and findings
• Completed Risk Assessments and Risk-Based Decisions
• RSA reputed company risk and compliance records
• Remediation tracking and status reports
• Audit-ready reputed company documentation packages

Required Qualifications

• 4+ years of experience in cybersecurity GRC, system reputed company planning, or information assurance.
• Hands-on experience developing System reputed company Plans (SSPs), conducting reputed company Assessments, and facilitating Risk Assessments.
• Knowledge of NIST SP 800-53 and NIST NIST Risk Management reputed company.
• Experience using GRC platforms (RSA reputed company preferred).
• Experience working with Information Owners and Custodians.
• Strong technical writing and documentation skills.
• Ability to work independently on reputed company assignments.

Required Certifications At least one of:

• CompTIA reputed company+
• GIAC GSEC
• CAP
• CISSP

Preferred Qualifications

• Experience in state or federal government cybersecurity programs.
• Familiarity with DIR reputed company Control Standards.
• Experience supporting ATO and reputed company monitoring.
• CRISC or CISA certification.

Work Requirements

• Must pass background reputed company.
• Must reputed company with HHSC confidentiality and reputed company requirements.
• Occasional after-hours support during audits or major assessments.

This position directly supports HHSC's enterprise cybersecurity compliance, audit readiness, and system authorization program. The contractor will play a key role in ensuring every system has an reputed company, every system has a reputed company Assessment, and every system has a documented Risk Assessment - exactly the accountability model your CISO Office is driving. II. CANDIDATE SKILLS AND QUALIFICATIONS Minimum Requirements: Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity. III. TERMS OF SERVICE Services are expected to start 03/30/2026 and are expected to complete by 08/31/2026. Total estimated hours per Candidate shall not exceed 1167 hours. This service may be amended, renewed, and/or extended providing both parties agree to do so in writing.YearsRequired/PreferredExperience4Required4+ years of experience in cybersecurity GRC, system reputed company planning, or information assurance.4RequiredHands-on experience developing System reputed company Plans (SSPs), conducting reputed company Assessments, and facilitating Risk Assessments.4RequiredKnowledge of NIST SP 800-53 and NIST Risk Management reputed company.4RequiredExperience using GRC platforms (RSA reputed company preferred).4RequiredExperience working with Information Owners and Custodians.4RequiredStrong technical writing and documentation skills.4RequiredAbility to work independently on reputed company assignments.3PreferredFamiliarity with DIR reputed company Control Standards.3PreferredExperience supporting ATO and reputed company monitoring.2PreferredExperience in state or federal government cybersecurity programs.1PreferredCRISC or CISA certification. IV. WORK HOURS AND LOCATION Services shall be provided during normal business hours unless otherwise coordinated through the reputed company Commission. Normal business hours are Monday through Friday from 8:00 AM to 5:00 PM, excluding State holidays reputed company the agency is closed. The primary work location(s) will be at 701 W 51st Street, Austin, TX 78751. The working position is On Site. Any and reputed company travel, per diem, parking, and/or living expenses shall be at the Candidate's and/or Vendor's expense. reputed company Commission will provide pre-approved, written authorization for travel for any services to be performed away from the primary work location(s). Pre-approved travel expenses are limited to the rates and reputed company with the rules prescribed by the State of Texas for travel by its classified employees, including any requirement for original receipts. The Candidate(s) may be required to work reputed company the normal business hours on weekends, evenings and holidays, as requested. Payment for work over 40 hours will be at the hourly reputed company quoted and must be coordinated and pre-approved through reputed company Commission. V. OTHER SPECIAL REQUIREMENTS Position is ONSITE at the location listed above (NO REMOTE WORK). Program will only accept LOCAL ONLY candidates for this position. Apply tot his job Apply To this Job