Security and Quality Analyst

The Security, Quality and Documentation Analyst is responsible for overseeing security controls, FERPA compliance, access management, service quality, and technical documentation. This role ensures adherence to security policies, maintains incident escalation procedures, coordinates security awareness, and conducts thorough quality reviews of technical deliverables. Responsibilities:

• Review contractor procedures for alignment with Attachment D.
• Verify least-privilege access and ensure timely removal of access rights.
• Review privileged-account and approved remote-access practices.
• Maintain security and privacy incident-escalation procedures.
• Coordinate contractor personnel security and privacy awareness training.
• Review change plans for testing, validation, and rollback completeness.
• Conduct quality reviews of reports, diagrams, runbooks, and project deliverables.
• Track corrective actions arising from incidents, audits, or service failures.
• Review data-retention, return, and destruction procedures.
• Verify subcontractor access is not granted without proper approval.
• Assist with post-incident reviews and root-cause documentation.
• Maintain document version control, approval, and ownership.

• Information security and privacy operations expertise.
• FERPA awareness and knowledge of education-sector data handling.
• Experience with identity and privileged-access controls.
• Incident-response coordination skills.
• Technical quality assurance capabilities.
• Change and configuration management experience.
• Strong technical writing and documentation governance skills.
• Risk and corrective-action tracking proficiency.
• Minimum five years of experience in IT security, quality assurance, compliance, or technical governance.
• Experience reviewing infrastructure operating controls.

• CISSP, CISM, Security+, or equivalent certification.
• ITIL Foundation certification.
• Relevant privacy or risk-management certifications.

• Strict adherence to FERPA and privacy regulations.
• Maintaining confidentiality and security of sensitive data.
• Coordination with multiple contractors and stakeholders to ensure compliance.

• Standard business hours with possible requirements for incident response support.