Current jobs related to Security Analyst - Washington, Washington, D.C. - IMF - International Monetary Fund


  • Washington, Washington, D.C., United States Armada Ltd Full time

    Job OverviewPosition Type: Full TimeWork Location: Washington, DCExempt Status: YesReporting Structure: ARMADA HQRequired Clearance: Active Top Secret****************CONTINGENT UPON AWARDING OF GOVERNMENT CONTRACT********The Construction Security Analyst is tasked with evaluating and identifying potential security implications of construction initiatives...


  • Washington, Washington, D.C., United States Critical Solutions Full time

    Job DescriptionJob Title: Cyber Security AnalystJob Summary:Critical Solutions is seeking a highly skilled Cyber Security Analyst to join our team. As a Cyber Security Analyst, you will be responsible for monitoring enterprise networks and systems, detecting events, and reporting on any and all threats that are directed against those systems.Key...


  • Washington, Washington, D.C., United States Watershed Security Full time

    Job OverviewCOMPANY BACKGROUNDWatershed Security is a Veteran Owned Small Business recognized for delivering exceptional Cyber Security Services to the Federal Government. We pride ourselves on fostering a challenging and respectful workplace culture. Our mission is clear: "To inspire trust and respect with our customers and employees. Integrity in all we...


  • Washington, Washington, D.C., United States Armada Ltd Full time

    Job OverviewPosition Type: Full TimeWork Location: Washington, DCExempt from Overtime: YesReporting Structure: ARMADA HQRequired Security Clearance: Active Top Secret****************CONTINGENT UPON AWARDING OF GOVERNMENT CONTRACT********The Construction Security Analyst is tasked with evaluating and identifying potential security implications of construction...


  • Washington, Washington, D.C., United States Iron Vine Security Full time

    Job SummaryWe are seeking a highly skilled Cyber Security Engineer to join our team at Iron Vine Security. As a key member of our security team, you will be responsible for designing, implementing, and maintaining IT security systems to protect our digital assets from malicious cyber-attacks.Key ResponsibilitiesDevelop and maintain reporting, alerts, and...


  • Washington, Washington, D.C., United States Critical Solutions Full time

    Job DescriptionJob Summary:Critical Solutions is seeking a highly skilled Cyber Security Analyst to join our team. As a Cyber Security Analyst, you will be responsible for monitoring enterprise networks and systems, detecting events, and reporting on any and all threats that are directed against those systems.Key Responsibilities:Monitor enterprise networks...


  • Washington, Washington, D.C., United States MELE Associates, Inc. Full time

    Job OverviewPOSITION SUMMARYMELE Associates, Inc. is looking to enhance our National Security and Intelligence team by adding a committed Senior Security Analyst. This role will support a significant client within the Department of Energy (DOE) Safeguards and Security program. The Senior Security Analyst will be tasked with producing comprehensive written...


  • Washington, Washington, D.C., United States Iron Vine Security Full time

    Job Title: Senior Cyber Security EngineerAbout the Role:We are seeking a highly skilled Senior Cyber Security Engineer to join our team at Iron Vine Security. As a key member of our cybersecurity team, you will be responsible for designing, implementing, and maintaining IT security systems to protect our digital assets from malicious cyber-attacks.Key...


  • Washington, Washington, D.C., United States Insight Global Full time

    Position OverviewKey Qualifications:Minimum of 4 years of pertinent experienceBachelor's Degree requiredActive TS ClearanceCompletion of a Tier 5 Investigation with favorable results under the NISPRole Summary:Insight Global is in search of a dedicated Government Security Analyst to support a federal client. The ideal candidate will have successfully...


  • Washington, Washington, D.C., United States Iron Vine Security Full time

    Job Summary:We are seeking a highly skilled Cybersecurity Expert to join our team at Iron Vine Security. As a Senior Cyber Security Engineer, you will play a critical role in designing, implementing, and maintaining IT security systems to protect our digital assets from malicious cyber-attacks.Key Responsibilities:Actively search for Indicators of Compromise...


  • Washington, Washington, D.C., United States Oaklea Security Services LLC Full time

    Job OverviewPosition: All-Source Analyst and ReporterLCAT: TTWork Location: National Maritime Intelligence CenterRequired Qualifications: Over 10 years of experience utilizing Intelligence Community (IC) tools, proficient in querying extensive datasets or databases for comprehensive target research, all-source analysis, and reporting.Preferred...


  • Washington, Washington, D.C., United States Charles River Associates Full time

    Forensic Analyst Job OverviewAt Charles River Associates, we are a leading consulting firm that provides exceptional services in accounting, forensic analysis, and cybercrime investigation. We are seeking highly motivated candidates with a background in Computer Science, Digital Forensics, Information Security, or Information Systems.Key...


  • Washington, Washington, D.C., United States ManTech Full time

    Secure Our Nation, Ignite Your Future Become a vital member of a diverse team that excels in Mission, Cyber, and Technology Solutions. At ManTech International Corporation, you will play a crucial role in safeguarding our national security while engaging in innovative projects that provide avenues for professional growth. Currently, we are seeking a driven...


  • Washington, Washington, D.C., United States QinetiQ Full time

    Job SummaryWe are seeking a highly skilled Senior All Source Intelligence Analyst to join our team at QinetiQ US. As a key member of our DIA team, you will be responsible for conducting in-depth analysis of national security issues and developments using intelligence and information from multiple sources.Key ResponsibilitiesConduct complex analysis to...


  • Washington, Washington, D.C., United States Customer Value Partners Full time

    Job OverviewCustomer Value Partners is seeking an Information Security Analyst to become a vital part of our expanding team. This role will focus on the execution of Zero Trust principles.Key Responsibilities:Assist in the establishment and enhancement of Zero Trust security frameworks and strategic plans tailored to organizational needs, industry standards,...


  • Washington, Washington, D.C., United States Oaklea Security Services LLC Full time

    Job OverviewPosition: Intelligence Analyst and ReporterJob Category: TTWork Location: National Maritime Intelligence CenterRequired Qualifications: Over 10 years of experience utilizing intelligence community tools, adeptness in querying extensive datasets or databases for comprehensive target research, all-source analysis, and reporting.Preferred...


  • Washington, Washington, D.C., United States Avid Core Full time

    Job Title: Senior Program Analyst - Border SecurityAre you passionate about supporting border and national security initiatives? Do you have experience in technical program management and stakeholder engagement? We're seeking a Senior Program Analyst to join our team at Avid Core, a woman-owned small business headquartered in Northern Virginia.Job...


  • Washington, Washington, D.C., United States Abacus Technology Corporation Full time

    Position OverviewAbacus Technology Corporation is looking for a Senior Cyber Security Analyst to strategize and execute protective measures for IT systems within the Department of Energy's Office of Environment, Health, Safety, and Security (EHSS). This role is a full-time opportunity.Key ResponsibilitiesContribute to the enhancement of the DoE EHSS security...


  • Washington, Washington, D.C., United States Maveris Full time

    Position OverviewMaveris, a dedicated provider of IT and cybersecurity solutions, is focused on empowering organizations to develop secure digital infrastructures that advance their missions. As a Veteran-owned entity, we take pride in serving both Federal Government and private sector clients. We are currently seeking a full-time Lead Offensive Security...


  • Washington, Washington, D.C., United States Oaklea Security Services LLC Full time

    Job OverviewPosition: All-Source Analyst and ReporterLCAT: TTWork Location: National Maritime Intelligence CenterRequired Qualifications: Over 10 years of experience utilizing Intelligence Community (IC) tools, adeptness in querying extensive datasets for comprehensive target research, all-source analytical capabilities, and reporting.Preferred...

Security Analyst

3 months ago


Washington, Washington, D.C., United States IMF - International Monetary Fund Full time
Work for the IMF. Work for the World.


The Information Technology Department (ITD) at the IMF is more than just a support function; it is a critical catalyst for change.

We champion the seamless integration of cutting-edge technology solutions, ensuring the IMF's mission is propelled by innovation and efficiency.


Within the IT department, the Information Security and Governance (ISG) division and other first-line cybersecurity teams stand as the guardians of integrity and a beacon of trust.

We are not just about managing risks; we are about envisioning, enabling, and implementing a secure future for global economic stability.


Our teams are dedicated to:

  • Crafting and executing a forwardthinking and resilient Cybersecurity Strategy.
  • Enacting inclusive governance that balances security needs with operational fluidity.
  • Developing policies and standards that stay ahead of the threat landscape.
  • Ensuring compliance, resilience, and agility in our cybersecurity posture.
  • Engaging in relentless evaluation, management, and tracking of cybersecurity and digital risks linked to the utilization of the Fund's information assets, ensuring a secure operational framework.
  • Continuously enriching our annual information security culture, awareness, and education initiative, fostering a securityconscious environment across the organization.
  • Administering a compliance management program dedicated to maintaining firm adherence to the Fund's information security policies and standards.
  • Preserving a solid enterprise security reference architecture that acts as a safeguard for the Fund's information assets against pertinent threats.
  • Engineering, implementing, and sustaining secure and resilient technological solutions, spanning both onpremises and cloud infrastructures, to support the Fund's mission.
  • Overseeing cyber threat intelligence, and incident management, digital forensics, and investigations, alongside championing innovation in cybersecurity practices to achieve operational excellence and deliver value promptly.


As we expand our efforts to serve the Fund's staff and its members more effectively, we invite seasoned cybersecurity professionals to our elite cybersecurity teams.

We are looking for individuals with the requisite skills and expertise to address the current and forthcoming cybersecurity and business challenges faced by the Fund.


Job Summary


The Information Technology Department (ITD)'s Information Security and Governance (ISG) division of the International Monetary Fund (IMF) is seeking to fill a Security Analyst (Cloud Security Assurance) position.

Under the general supervision of the Section Chief, Information Security GRC, this role will provide security expertise and support of the IMF's security assurance program for a) Cloud solutions and b) Financial systems.


The expertise will take the form of security controls design, advisory guidance on controls implementation, continuous monitoring and improvement of control effectiveness, benchmarking, and reporting to maintain and exceed steady state conformance to IMF information security policies, standards, baselines, processes, and external obligations.


The candidate will be required to work with multi-disciplinary project teams, service providers, auditors, and business units internal and external to the IMF's IT function.

The candidate is expected to bring pragmatic risk-based technical security controls management experience allowing the IMF to meet its present and emergent business needs while staying within the boundaries of the IMF's cyber risk tolerance.


The candidate is expected to advise technology and business personnel regarding the value and methods of achieving operating effectiveness of security controls across cloud solutions and financial systems.


Major Duties and Responsibilities
1\.

Supports and maintains cloud security assurance framework and processes for performing continuous information security assurance assessments across existing and new cloud technologies, service providers, and internal/external General Computer Controls (ITGCC).

Guides Fund personnel on the appropriate security assurance management strategies. Supports information security related assurance issues across the IMF.

2\. Validates information security key controls to identify control risks, analyzes root causes and trends in potential control weaknesses. Suggests new controls to meet risk-based expectations where applicable.

3\.

Guides, monitors, and drives mitigation of identified risks in cloud solutions and financial systems through follow-up and follow-through with lines of business and IT stakeholders.

4\. Collaborates with cloud technology platform teams to evolve automation footprint of security controls validation.

5\.

Continuously monitors the effectiveness of security controls in cloud environments and financial systems through comprehensive assessments across domains including but not limited to IAM, secure CI/CD pipeline, data security/protection, incident management, vulnerability management, key management, cryptography, etc.

6\.

Supports the Section Chief as the audit liaison for the IT Department as it relates internal audit, external audit entities, and committees.

Supports the coordination of audit-related tasks such as ensuring the readiness of IT managers and staff for audit testing, and facilitates the tracking, timely resolution and reporting of any audit findings.

7\. Contributes to improvements in information security KPI's and KRI's. Supports the communication and reporting on security metrics to stakeholder governance groups.

8\. Maintains independence and impartiality around IT systems and IT/business processes to produce unbiased reports on information security.

Minimum Qualifications


Advanced degree in information security, computer science, engineering, mathematics, or related field of study plus a minimum of 4 years of progressive information security work experience
OR Bachelor's degree in information security, computer science, engineering, mathematics, or related field of study and minimum 10 years of progressive information security work experience.


  • Candidates should possess one or more globally recognized information security professional certifications e.g., CCSP, CISSP, CISM, etc. One of the certifications should be cloudplatform security focused e.g.
, Microsoft Certified:

Cybersecurity Architect Expert, GIAC PCS, GIAC CTD, GIAC CFR, GIAC CSA, etc.

  • Experience with assessment of a comprehensive and broad set of security technologies and processes, data security, cryptography, key management, identity, and access management, cloud API integration, network security, logging and monitoring within SaaS, IaaS, PaaS, and other cloud environments.

Work Management Skills

  • Navigates through obstacles and challenges effectively and demonstrates commitment to deliver successful results.
  • Ability to collaborate with IT and business colleagues to prioritize work, develop roadmaps, enhance services, and contribute meaningfully to the department's service delivery.
  • Ability to balance multiple priorities and demands.
  • Analytical skills that enable synthesis of inputs from many sources and allow for strategic thinking and tactical implementation.
  • Interpersonal skills that create openness and trust among colleagues.
  • Facilitation and conflict management skills that enable effective working relationships.
  • Spoken and written communications that are compelling, convincing, and reassuring, and skills to articulate complex technical ideas to nontechnical stakeholders.
  • Pragmatic security expert with an inherent ability to balance security demands with business reality.

Technical Skills

Knowledge of and experience with:

  • Integrating information security compliance requirements into project management, service management, security architecture, ITIL, and SDLC frameworks.
  • Applying information security controls in infrastructure, network, endpoints, applications, and database system technologies.
  • Designing and assessing operating effectiveness of technical security controls that enable ICFR.
  • Proven experience implementing security programs in cloud environments such as Azure (preferred), AWS, or GCP.
  • Design and implementation of security initiatives associated with control frameworks including but not limited to CSA CCM & STAR, ISO 27017, NIST CSF, COSO, SWIFT CSCF, etc.
*This vacancy shall be filled by a 3-year Term appointment in accordance with the Fund's new employment rules that took effect on May 1, 2015.

Department:
ITDSGGR Information Technology Department Information Security & Governance InfoSec Gov.

, Risk, Compliance & Data Security Section
Hiring For:


A11, A12*The IMF is committed to achieving a diverse staff, including age, creed, culture, disability, educational background, ethnicity, gender, gender expression, nationality, race, religion and beliefs, and sexual orientation.

We welcome requests for reasonable accommodations for disabilities during the selection process.*