We are seeking a Senior Controls Assessment Analyst to perform security and controls assessments, identify and document vulnerabilities, and recommend remediation strategies to address security gaps. The role requires collaboration with system owners, technical teams, vendors, and other stakeholders to conduct effective assessments. The analyst will manage and track Plans of Action and Milestones (POA&Ms), support security and privacy asset inventories, and contribute to training and awareness programs through metrics development and reporting.

The ideal candidate is self-motivated, highly analytical, adaptable, and capable of managing multiple projects simultaneously.

Required Experience: 

• Experience conducting security assessments on federal systems.
• Experience assessing and mitigating risks associated with cybersecurity and data privacy.
• Understanding of relevant laws and regulations, such as NIST guidance and OMB memoranda. This includes knowledge of the NIST Risk Management Framework and familiarity with key publications like NIST SP 800-37, 800-53, and 800-171.
• Experience developing and implementing compliance programs, conducting risk assessments, and advising on compliance-related issues.
• Experience with the system Authorization to Operate process, including understanding the documentation required, the levels of approval needed, and the most effective ways to manage this process within a federal environment.
• Basic understanding of procurement processes and contract language requirements for federal mandates.
• Experience communicating complex regulatory and compliance information in a clear and concise manner.
• Experience tracking and reporting on training and awareness program performance, including calculating metrics to help measure the effectiveness of security, privacy, and social engineering training.
• Knowledge of SOX controls.

At Horizontal, we are committed to fostering a diverse, equitable, and inclusive environment where all individuals are valued and empowered.