Business Analyst 3

Job Title: Business Analyst 3 - INFOSEC Compliance and Business Process
Job Number: 12028
Location: Portland, OR
Hybrid: onsite 3 days per month. Assignment is approved for telework based on the approval of the Manager
May be required to work non-core hours as circumstances warrant. Saturdays and evening hours may be necessary for finishing assessments/audits and other compliance related activities, as needed

Overtime: 5%
Travel: Up to 5% for local meetings and training
Length: 5 years

MUST be US Citizen to be eligible to apply for Federal Background Check

Requires Real ID and or Valid Passport to interview

SUMMARY


This contract Business Analyst 3 assignment is located within the Personnel and Information Security, (PERSEC) organization and will serve as a hands-on programmatic coordinator and auditor, supporting effective program management and project plan coordination for the INFOSEC (Information Security) program objectives and initiatives. The Business Analyst will play a key role in the development of an agency-wide Information Security and Awareness Program and subsequent implementation


POSITION RESPONSIBILITIES

• Provide highly skilled project coordination and change management services in support of Information Security initiatives.
• Develop recommendations to division manager regarding process improvement(s) as they relate to Information Security implementation and operational excellence.
• Execute to drive success on project initiatives through development of sound project plans and change management plans in the areas of stakeholder sponsorship, communication, and training and resistance management.
• Develop corporate-wide information sharing tools, such as visuals, poster boards, fliers, informational handouts, etc.
• Provide guidance to corporate personnel regarding security policies and procedures as needed
• Develop and/or maintain corporate-wide reporting and tracking tools using SharePoint
• Compile, track, and/or report status/progress data as requested for inclusion in management, program, and/or project reports; this may include providing information for Key Strategic Initiatives (KSIs).
• Develop, implement and monitor effectiveness of change plans and strategies through various feedback loops or measurements and continuously improve to gain maximum benefit, mitigate risks and address identified deficiencies
• Develop, maintain and improve project management/change management goals and tools to track program progress, objectives, and milestones in support of corporate wide INFOSEC implementation schedule (deliverables, templates, techniques) that are simple, effective, and designed for different audiences.
• Document, test, and evaluate corporate adherence to established policies and procedures, providing feedback to applicable parties in the form of assessments/audits.

• Support a sustainable infrastructure by providing adequate documentation of activities (strong evidence and compliance experience).
• Cross-train other personnel and employees on INFOSEC processes and procedures as needed.
• Coordinate with division manager on recommended improvements, changes, and course corrections.
• Working with corporate manager / team lead or other federal party, follow up and coordinate corporate responses to security incidents.
• Develop recommended assessment/adherence plans; obtain approval for recommended actions; execute approved plans and report results to the division manager.
• Provide expertise with business process modeling techniques to recommend new business drivers and roles and responsibilities within a project or program plan; incorporate approved recommendations as assigned.
• Research the necessary information to develop training manuals and materials. Develop formats for training courses, providing recommendations on the emphasis to be placed upon each segment; obtain appropriate approvals on recommendations. Based on approved training material recommendations:

• Carry out the training project or assignment (delivery) including resolving routine and/or technical problems/issues;
• Validate training material aligns appropriately with corporate / INFOSEC policy;
• Provide recommendations regarding the best practice training approach to be taken, including the methods and techniques to be employed; obtain corporate manager / team lead approval of recommended approach;
• Train the trainers, as appropriate and/or requested.

• Develop methods to evaluate trainee progress in business process-related training, as well as for continuing education. Provide developed methods for corporate manager/team lead review and approval; implement approved evaluation methods, with continuing coordination and oversight of the appropriate corporate manager / team lead.
• Provide guidance and input into technical reviews of proposed projects, including recommended certification and accreditation process to be utilized.

• Provide status update(s) to the corporate manager / team lead in a routine and timely manner, allowing time for review and approval and any necessary corrections that may be needed before established deadline(s).

Education & Corresponding Experience

• A degree in business administration, management, accounting, computer science or a closely-related field is preferred.
• With an applicable Bachelor's Degree, 8 years of experience is required
• With an applicable Associate's Degree, 10 years of experience is required
• Without an applicable degree, 12 years of experience is required
• Experience should include the specific requirements of business analysis and progressively more technical in nature.

Required Skills & Experience

• Experience with the following:
• Note: Candidate resume and requirements matrix must clearly explain applicable experience in sufficient detail to validate the following requirements:

• 3+ years of experience effectively performing compliance and performance measurement activities in a security environment.
• Direct work experience and knowledge of change management methodologies coupled with project planning and execution principles.
• Experience should include a minimum of three years in one or more of the following security disciplines: Information/Operations (InfoSec/OpSec), Physical, Personnel, or Industrial.
• Previous program support/project coordination experience demonstrating strong ability to interpret requirements and apply judgment to validate policies are compliant with regulations is required
• Intermediate to Expert level experience with Microsoft Office Suite Software (MS Word, Excel, Outlook); (MS Office 2010 proficiency required).

• Intermediate level experience with MS Project, SharePoint and PowerPoint is required. Experience should be sufficient to:
  • Define and track projects utilizing MS Project
  • Provide status and project reporting utilizing SharePoint
  • Develop and/or maintain corporate-wide reporting and tracking tools utilizing SharePoint
  • Create comprehensive, informational, and attractive presentations using PowerPoint
• Experience in evaluating the adequacy and existence of security controls, preferably related to a security discipline.
• Experience researching and maintaining proficiency in tools, techniques, countermeasures, and trends in information security, computer and network vulnerabilities
• Ability to meet/monitor/report timelines, milestones, deliverables, and provide timely status updates on assigned tasks utilizing MS Project and other acceptable work processing tools
• Experience applying change management techniques independently and, as a team member; plan, execute strategies and recommendations in the environment.
• Experience performing analysis of in-place technical and non-technical information security controls protecting information in both electronic and physical form.

Preferred Skills & Experience

• Training development experience using the Captivate software program.
• Knowledge of principles of project management and change management
• Experience with identification of sensitive and/or classified information

Additional Requirements:

• Valid U.S. Driver's License is required
• Must be able to obtain a Certificate of Completion in Personnel Security and Information Security training plan

Pre-Employment Requirement
All employment offers are contingent upon successful completion of our pre-employment screening that may include drug testing, background/criminal check, and if applicable, must meet eligibility requirements for access to classified information.


APR Staffing is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.

About APR Staffing
APR Staffing was born from the merger of two well-respected technical staffing firms in Portland. ieSolutions and Data Resource Group. Both companies have recently been award winners for the Portland Business Journal's Fastest-Growing Private Companies. The two firms, now as APR Staffing, make for one of the fastest-growing and most-respected professional and technical staffing companies in Oregon and Southwest Washington.


Collaborating with our customers, we augment their workforce with technical and administrative professionals. We provide only high-caliber, professional-grade resources throughout the Pacific Northwest.