Information Security Analyst jobs at Mathematica - 4 jobs
Cyber Information Assurance Analyst SME
Chickasaw Nation Industries 4.9
Remote
The Cyber Information Assurance Analyst SME provides IT support services for the Marine Corps Logistics Base by independently conducting complex security analyses of classified and unclassified systems for compliance with security requirements. Performs Command Cyber Readiness Inspections, vulnerability evaluations, and utilizing various security technologies and tools to assess the security posture of intricate computer systems and networks. Responsibilities include conducting vulnerability and risk analyses, participation in penetration studies, and defining security requirements for a range of computing systems. Recommends solutions to enhance security, gathers technical information to align with organizational goals, and offers technical analysis and advice to client executive management on system improvements, focusing on areas like information systems architecture, networking, and communication protocols. This position is on-site in the Albany, GA area.
Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Technology, Infrastructure & Engineering, Health, Manufacturing, Public Safety, Consulting, and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people. CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental - Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays.
As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.
ESSENTIAL REQUIREMENTS
Secret Clearance is required and must be maintained for employment. Must be eligible for an IT-II upon assignment.
Tenable Certified NESSUS Auditor required and must maintain CSSP Auditor Certification.
IAM III and IAT II level certification is required.
Proven proficiency performing CCRI / vulnerability assessment / penetration testing on networks, databases, computer applications and IT frameworks
Seven (7) years IT experience
Five (5) years IA experience
Two (2) years of experience with DOD Vulnerability Management System
Command Cyber Readiness Inspection certification in at least one of the following areas:
Retina scan analysis o Operating Systems (Windows, Unix)
Boundary defense (network policy, router, firewall)
Internal defense (L2 switch, L3 switch)
DNS (policy, BIND/Windows)
HBSS (remote console, AV, ABM, PA, HIPS, ePO)
Traditional security (Common, Basic, NCV, SCV)
Wireless communications (BES, handhelds)
Strong analytical and problem solving skills for resolving security issues
Strong skills implementing and configuring networks and network components
Knowledge and understanding of DOD security regulations, DISA Security Technical Implementation Guides
Understanding of SCAP
Knowledge of and proficiency with: VULNERATOR; USCYBERCOM CTO Compliance Program; Wireless vulnerability assessment; Web Services (IIS, Apache, Proxy); Database (SQL Server, Oracle); Email Services (Exchange); Vulnerability Scans (NESSUS, SCCM); Knowledge of Phishing exercises; USB Detect; Physical Security.
Nice to have: DISA FSO certified CCRI Team Lead and have a certification in penetration testing, such as: Licensed Penetration Tester (LPT); Certified Expert Penetration Tester (CEPT); Certified Ethical Hacker (CEH); Global Information Assurance Certification Penetration Tester (GPEN); Familiarity with AUTOCHECKLIST Tool.
KEY DUTIES AND RESPONSIBILITIES
Essential Duties and responsibilities include the following. Other duties may be assigned.
Independently performs complex security analysis of classified and unclassified applications, systems and enclaves for compliance with security requirements.
Performs Command Cyber Readiness Inspections and cybersecurity vulnerability evaluations.
Uses a variety of security techniques, technologies, and tools to evaluate security posture in highly complex computer systems and networks.
Performs vulnerability and risk analysis, and participate in a variety of computer security penetration studies.
Analyzes and defines security requirements for computer and networking systems, to include mainframes, workstations, and personal computers.
Recommends solutions to meet security requirements.
Gathers and organizes technical information about an organization's mission goals and needs, and makes recommendations to improve existing security posture.
Provide enterprise-wide technical analysis and direction for problem definition, analysis and remediation for complex systems and enclaves.
Provides workable recommendations and advice to client executive management on system improvements, optimization and maintenance in the following areas: Information Systems Architecture, Automation, Telecommunications, Networking, Communication Protocols, Application Software, Electronic Email, VOIP and VTC. Competent to work at the highest level of all phases of information systems auditing.
EDUCATION AND EXPERIENCE
Seven (7) years of experience, or an equivalent combination of education/experience.
PHYSICAL DEMANDS
Work is primarily performed in an office environment. Regularly required to sit. Regularly required use hands to finger, handle, or feel, reach with hands and arms to handle objects and operate tools, computer, and/or controls. Required to speak and hear. Occasionally required to stand, walk and stoop, kneel, crouch, or crawl. Must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, and ability to adjust focus. Exposed to general office noise with computers printers and light traffic.
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job.
EOE including Disability/Vet
CNI offers a comprehensive benefits package that includes:
Medical
Dental
Vision
401(k)
Family Planning/Fertility Assistance
STD/LTD/Basic Life/AD&D
Legal-Aid Program
Employee Assistance Program (EAP)
Paid Time Off (PTO) - (11) Federal Holidays
Training and Development Opportunities
Your application submission will be considered for all potential employment opportunities with Chickasaw Nation Industries (CNI).
$48k-74k yearly est. Auto-Apply 1d ago
Looking for a job?
Let Zippia find it for you.
Chief Information Security Officer
Montrose Environmental Group 4.2
Remote
Why Montrose
Montrose is on a mission to protect the planet and public health using science, data, and technology at scale. Our commitment to environmental intelligence, regulatory insight, and advanced digital platforms drives our approach to security and risk management. The CISO role is pivotal in safeguarding our business, our clients, and our mission, moving beyond compliance optics to build a resilient, risk-based security culture that enables growth and innovation.
This is not a checkbox compliance role. This is enterprise security leadership with real-world impact: embedding security into every layer of our technology stack, business processes, and product delivery. If you're energized by building robust security programs, closing material risk gaps, and enabling modern engineering workflows, this role is built for you.
The Role
The Chief InformationSecurity Officer (CISO) owns the strategy, architecture, and execution of Montrose's enterprise security program. The CISO leads a cross-functional security team (Governance, Risk & Compliance, Security Operations, Identity & Access Management) and partners with Legal, Infrastructure, Applications, and Product Engineering to deliver a comprehensive, scalable, and audit-ready security posture.
You will define how security is designed, governed, and operationalized, driving clarity where there is complexity and accountability where there is fragmentation. You'll be bold about policy lifecycle management, asset visibility, and risk prioritization, while preparing the organization for the next generation of compliance, monitoring, and secure product delivery.
What We Can Offer You
Our mission is supported by our principles: We Value Our People, We Value Our Community, We Value Our Clients, We Value Our Shareholders. We differentiate ourselves with diverse talent. We care for the well-being and development of our people. So, we offer:
Regular interaction and partnership with the executive team and senior leaders across Montrose
Competitive compensation package: annual salary ranging from $275,000 - $300,000 USD; eligible for annual bonus of 30-40%
Competitive medical, dental, and vision insurance coverage
401k with a competitive 4% employer match
Progressive vacation policies and company holidays to ensure work/life balance
A financial assistance program to help support peers in need known as the Montrose Foundation
Access to attractive student loan rates to optimize your student loan payoff plans
Key Responsibilities
Enterprise Security Strategy & Architecture: Own the end-to-end vision and roadmap for Montrose's enterprise security program; define reference architectures and governance principles aligned to NIST 800-171, ISO 27001, NIST CSF, CIS Controls.
Risk Management & Compliance: Build and maintain a CMMC L2 compliant enclave; align governance and controls to regulatory frameworks; lead incident readiness and response.
Security Operations & Architecture: Establish a complete asset inventory and validate tool coverage; segment and secure lab networks; partner with CTO and engineering teams to enable secure, modern software development.
Policies, Training & Culture: Publish clear policies and governance procedures; ensure annual reviews and training; govern guest/external data sharing in M365.
Team & Leadership: Lead and grow a high-performing security organization spanning GRC, SecOps, and IAM; serve as a trusted partner to executives.
What Success Looks Like (9-12 Months)
A clearly defined, well-governed enterprise security architecture is in place.
Asset inventory and tool coverage are complete and validated; continuous monitoring is operational.
CMMC readiness achieved; SOC 2/ISO 27001 certification plan is underway.
Security policies are published, enforced, and aligned to best practices.
Security is embedded in engineering workflows and product delivery.
Qualifications
10+ years of experience leading enterprise security programs and teams (GRC, SecOps, IAM) with direct CIO reporting.
Demonstrated success aligning programs to NIST 800-171, ISO 27001, NIST CSF, CIS Controls, and achieving compliance.
Proven ability to operationalize policy lifecycle management, incident response, and audit readiness.
Track record partnering with Legal, Infrastructure, Applications, and engineering teams to reconcile control rigor with delivery needs.
Ability to communicate effectively with executives, technical teams, and business leaders.
You respectfully challenge your peers, and welcome the opportunity when others challenge you.
You are flexible, resilient, and curious.
Preferred
Industry certifications (e.g., CISSP, CISM).
Experience preparing for or implementing SOC 2/ISO 27001 audits and CMMC enclaves.
Background in regulated, data-intensive, or multi-line-of-business environments.
Why This Role Is Compelling
As CISO at Montrose, you will own and shape the entire security program - transforming it from a reactive, compliance-driven function into a proactive, business-enabling force. You'll have the mandate and executive support to build a modern, risk-based security culture that not only protects the organization but also empowers innovation and growth.
Your leadership will directly impact Montrose's ability to win and retain business, meet evolving regulatory demands, and deliver on our mission to protect the planet and public health. By partnering across IT, Legal, Product, and Operations, you'll ensure that security is a strategic enabler, removing friction, building trust with clients, and supporting the rapid adoption of new technologies.
If you want to drive meaningful change, influence business outcomes, and lead a security program that is respected as a business partner - not just a gatekeeper - this is the role.
Make The Right Move To Accelerate Your Career
Montrose is a leading environmental solutions company focused on supporting commercial and government organizations as they deal with the challenges of today and prepare for what's coming tomorrow. With ~3,400 employees across 100+ locations worldwide, Montrose combines deep local knowledge with an integrated approach to design, engineering, and operations, enabling Montrose to respond effectively and efficiently to the unique requirements of each project. From comprehensive air measurement and laboratory services to regulatory compliance, emergency response, permitting, engineering, and remediation, Montrose delivers innovative and practical solutions that keep its clients on top of their immediate needs - and well ahead of the strategic curve. For more information, visit *********************
We are going to be blunt - the way we work may not suit everyone. Montrose is a fast-paced, dynamic and high-growth company. You
are
your own boss, but you will get ample guidance and support from talented, engaged, super-smart colleagues from Montrose and its service providers. Therefore, if freedom, autonomy, and head-scratching professional challenges attract you, we could be the perfect match.
Want to know more about Montrose? Visit montrose-env.com and have fun!
Montrose is an Equal Opportunity Employer. Montrose is committed to providing access and reasonable accommodation in its employment for individuals with disabilities.
$275k-300k yearly Auto-Apply 2d ago
INFORMATION TECHNOLOGY ANALYST
City of New Bedford, Ma 4.2
New Bedford, MA jobs
For a description, see PDF at: ********************** s3. amazonaws. com/wp-content/uploads/sites/45/**********3253/Information-Technology-Analyst-7. 22. 25.
pdf
$63k-79k yearly est. 35d ago
Systems Administrator/Information Security Officer
United States Courts 4.7
Boston, MA jobs
Court Name/Organization Massachusetts Bankruptcy Court Overview of the Position The Court seeks a well-organized, detail-oriented, and time-conscious individual who enjoys Linux systems administration and informationsecurity (SysAdm/ISO). The SysAdm/ISO performs technical work involving the design, modification, adaptation, and security of existing systems, as well as advanced troubleshooting of hardware and software issues.
The SysAdm/ISO also develops and implements secure hardware and software solutions consistent with national standards and provides comprehensive support as a member of the McVCIS team.
The SysAdm/ISO is responsible for managing the McVCIS systems and maintaining the security posture of both production and development environments.
The duties described for the SysAdm/ISO position are not intended to reflect all tasks performed within this classification.
Location Boston, MA Opening and Closing Dates 12/18/2025 - Open Until Filled Appointment Type Permanent Classification Level/Grade CL 28 Salary $80,293 - $130,488 Announcement Number 2025-15 Link to Job Announcement