Equifax, Inc.

Apply for this job

Senior FISMA Security Compliance Analyst (Finance)



We are seeking a motivated and detail-oriented individual to join our team as a Senior FISMA Security Compliance Analyst. The successful candidate will be responsible for ensuring the security and compliance of our systems and data in accordance with the Federal Information Security Management Act (FISMA).

You will serve as a point of contact for FISMA compliance, working with internal and external stakeholders to communicate compliance mandates and maintain compliance against published standards. You will support the compliance program to reduce compliance load and streamline program activities.

Equifax has a hybrid work schedule that allows for 2 days of remote work (Monday and Friday), with 3 days onsite (Tuesday, Wednesday, Thursday) every week.

This role will work the required onsite days at our Equifax office in Alpharetta, midtown ATL, Saint Louis, or Reston.

Sponsorship is not available for this position.

This is a direct-hire role and it is not open to C2C or third-party vendors.

What you will do

  • Manage FISMA Program :
    • Assist with the management and execution of the FISMA Compliance Program, ensuring compliance with FISMA Customer requirements, FISMA - NIST SP 800-53 Rev 5, internal security controls and policies.
    • Serve as a primary point of contact for all FISMA-related matters, collaborating with cross-functional teams.
  • Assessments: Coordinate and conduct Pre-assessments and FISMA assessments with internal and external stakeholders to ensure compliance with established guidelines.
  • Documentation: Develop, maintain, and assess documentation for FISMA Rev 5 compliance, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and other relevant artifacts.
  • Methodology & Process Improvement: Evaluate and enhance audit methodologies and processes for greater effectiveness and efficiency across the FISMA compliance program.
  • Communication & Reporting:
    • Provide regular updates and status reports on FISMA compliance activities to key stakeholders, fostering transparency and communication.
    • Utilize strong communication skills to advise organizational leaders on FISMA-related topics, compliance risks, and remediation strategies.

What experience you need
  • Education: Bachelor's Degree in Cyber/Information Systems/Information Security/or equivalent discipline or equivalent experience.
  • Experience: Minimum of 5 years of experience in regulatory compliance, consulting, or cyber security working with FISMA and NIST compliance regulations.
  • FISMA Expertise: Demonstrated experience with FISMA compliance, including:

  • Implementing and managing security controls based on NIST SP 800-53.
  • Conducting or supporting FISMA assessments and audits.
  • Experience working on an internal FISMA compliance team or supporting FISMA audits.
  • Developing and maintaining FISMA-related documentation (e.g., SSPs, SAPs, POA&Ms, evidence templates and artifacts).
  • Experience with FISMA compliance in the financial services industry is a plus.
  • Communication & Collaboration:
    • Proven ability to effectively collaborate with cross-functional, cross-organizational teams to secure commitments on deliverables and ensure resolution of blocking issues.
    • Excellent communication skills, including the ability to translate complex technical information into clear and concise language for diverse audiences, both verbally and in writing.
  • Project & Program Management: Exceptional project management abilities, including planning, organizing, and executing tasks related to FISMA compliance.
  • Analytical & Critical Thinking: Strong analytical and critical-thinking skills to identify and address compliance gaps and security risks.
  • Security & IT Knowledge: Familiar with Information Security principles, knowledge of IT processes (e.g., SDLC, Incident Management, Risk Management, Network and System Administration), and knowledge of IT platforms, web, middleware, cloud services (IaaS, PaaS, SaaS), database, operating systems, infrastructure, encryption, routers, firewalls, virtualization, tokenization.

What could set you apart
  • Government Experience: Possess experience working with government agencies or supporting FISMA audits for government clients.
  • 3PAO Assessment Experience: Have experience working with or as a 3PAO (Third-Party Assessment Organization) conducting FISMA assessments.
  • Broad Compliance Knowledge: Demonstrate experience with other compliance frameworks beyond FISMA, such as PCI DSS and SOC 2, showcasing a well-rounded understanding of security and compliance landscapes.
  • Effective Communication: Exhibit strong presentation and public speaking skills, enabling clear and persuasive communication of complex security concepts to diverse audiences.
  • Collaborative Leadership: Show a proven ability to build consensus and drive collaboration across diverse teams, fostering a cohesive and productive environment.
  • Continuous Improvement Mindset: Possess a passion for continuous improvement and innovation in audit methodologies, demonstrating a commitment to enhancing efficiency and effectiveness.
  • Industry-Recognized Certifications: Hold relevant industry certifications such as CISSP, CISM, CISA, or other related certifications that validate expertise in the field.

#LI-Hybrid

#LI-KD1 Apply

Apply Here done