Infosys Public Services is seeking a Cyber Security Analyst to join our team.

Summary:
Cyber Security Consultant with strong expertise in Governance, Risk and Compliance (GRC), NIST Risk Management Framework (RMF), Security Assessment and Authorization (SA&A), and Authorization to Operate (ATO) activities within U.S. federal, state, and local government environments. The consultant will assess security posture, conduct security and risk assessments, identify compliance gaps, develop and assess security controls, and support remediation and authorization activities aligned with FISMA, NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, FedRAMP, CMMC, and applicable government security and privacy requirements. These frameworks are commonly used across federal agencies, federal systems, cloud services, and government contractors. The role will support creating ATO packages artefacts including - System Security Plans (SSP), Security Procedures, Security design artefacts, security risk assessments, Plans of Action and Milestones (POA&M. The consultant will collaborate with system owners, ISSOs, ISSMs, security architects, cloud and infrastructure teams, auditors/assessors, and government stakeholders to ensure security requirements are effectively implemented and maintained throughout the system lifecycle.

Key Responsibilities:
Minimum 11 years of cybersecurity experience, with demonstrated experience supporting U.S. federal, state, local government, or regulated public-sector environments. Strong experience with NIST RMF, FISMA, Security Assessment and Authorization, ATO processes, NIST SP 800-53, NIST SP 800-171, IRS1075, CJIS, CMS MARS-E, HIPAA/HITECH, FedRAMP, security risk assessments, GRC, cloud security, Zero Trust, vulnerability management, security operations, and incident management. NIST describes RMF as encompassing preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring.

Required Skills:

• NIST RMF & ATO: Experience supporting RMF lifecycle activities, security authorization, control assessment, authorization packages, and continuous monitoring.
• FISMA & Federal Compliance: Strong understanding of FISMA and associated NIST standards applicable to federal information systems.
• Security Control Implementation & Assessments: Experience implementing, assessing technical, operational, and management controls related to NIST 800-53, IRS1075, FISMA/FEDRAMP and documenting control effectiveness and deficiencies.
• Security Documentation: Experience developing SSPs, SAPs, SARs, POA&Ms, risk assessments, control implementation documents, and authorization artifacts.
• Cloud Security: Experience assessing security configurations and controls across Microsoft Azure, AWS, or other government cloud environments.
• Zero Trust: Experience applying Zero Trust principles across identity, endpoint, network, application, workload, and data security.
• Identity & Access Management (IAM): Experience with Architecture and implementation of IAM solutions, access governance.
• Security Operations: Experience with SIEM/SOAR SOC operations, security monitoring, threat detection, endpoint security, and operational security controls.
• Incident Management: Experience supporting incident triage, investigation, containment, remediation, recovery, reporting, and lessons learned.
• Vulnerability Management: Experience evaluating vulnerabilities, prioritizing risk, coordinating remediation, and maintaining vulnerability and POA&M tracking.
• Continuous Monitoring: Experience supporting ongoing security control monitoring, vulnerability assessment, configuration compliance, and risk reporting.
• Security Architecture: Ability to evaluate cloud, infrastructure, network, application, identity, and data architectures against government security requirements.
• Privacy & Data Protection: Experience supporting privacy assessments and security controls for sensitive government information, PII, and regulated data.
• Stakeholder Management: Ability to collaborate effectively with government stakeholders, System Owners, ISSOs, ISSMs, Authorizing Officials, assessors, auditors, and technical delivery teams.
• Candidate must possess atleast 1 of the certifications - CISSP, CISM, CISA, CRISC, CCSP, GIAC,
• Microsoft Azure Security, or equivalent industry certifications are highly desirable.

Benefits

Along with competitive pay, as a full-time Infosys employee you are also eligible for the following benefits:

• Medical/Dental/Vision/Life Insurance
• Long-term/Short-term Disability
• Health and Dependent Care Reimbursement Accounts
• Insurance (Accident, Critical Illness , Hospital Indemnity, Legal)
• 401(k) plan and contributions dependent on salary level
• Paid holidays plus Paid Time Off

About Us
Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.

EEO
Infosys provides equal employment opportunities to applicants and employees without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability.