It Security And Compliance Associate

About Nava

Nava is a consultancy and public benefit corporation working to make government services simple, effective, and accessible to all. Since 2013, federal, state, and local government agencies have trusted Nava to build transformative digital services to help people access public benefits. Meeting our mission is an opportunity to restore trust between people and public institutions. We focus on populations that are the least protected because the stakes are higher.

As a client services company, we work with government agencies to improve how people apply for benefits, navigate their health care, and more. We bill for our time, selling our expertise and problem-solving methodology to government clients. Our clients hire us to help improve their products and services so that their users and beneficiaries have a better customer experience.

These end-users—the humans who benefit from our work—are at the core of everything we do. We research beneficiaries’ needs to help our government clients better deliver on their missions, providing everyone at Nava opportunities to do meaningful, impactful work.

Position Summary

The IT Security and Compliance Associate assists the IT Manager in maintaining the essential IT infrastructure of Nava. The incumbent will be responsible for ensuring Nava’s continued compliance with existing corporate certifications, along with supporting Nava in obtaining new certifications. This role will support these processes in all aspects, from managing company policies and procedures, coordinating with other departments up to and including Nava’s Executive Team, and managing Nava’s slate of tools and hardware in conjunction with Nava’s IT team.

All work will be done in support of Nava’s values: Be Active Stewards, Pursue the Root Cause, Think Long-Term, Build Together, Inclusion is Essential and Progress Takes Work.

What You'll Do

• Develop and deliver new security training materials for Nava employees
• Information Security Certification Management
• Support other Nava teams with certification efforts, including but not limited to ISO 9001, CMMI Level 2, and others, as needed.
• Provide Nava employees with support when needed, by responding to support tickets within an appropriate amount of time
• Security Analyst
• Conduct security reviews on vendor-supplied tools and services in order to confirm
• Lead and manage the internal development and deployment of new security solutions and improvements, including creating new reporting systems (Splunk SIEM)
• Managing security incidents as they occur, including initial triage, resolution of simple situations, and incident escalation, communication, tracking, and review
• Support requests may include but are not limited to - tool license management and allocation, hardware troubleshooting, and software troubleshooting
• End User Support
• Managing relevant infosec policies and procedures to ensure continued compliance with company certifications, including but not limited to ISO 27001, ISO 20000, and annual internal audits along with other regular processes as required by certifications.

Required Skills

• An adaptive, empathetic, collaborative, curious, and positive mindset
• 1+ years of experience in IT support or tech-forward customer service support
• Experience with ISO certification standards, including but not limited to ISO 27001, ISO 20000, and ISO 9001
• Experience with CMMC cybersecurity certification processes and procedures
• Ability to work independently and autonomously within a distributed team while soliciting feedback when necessary
• Highly organized, resourceful, reliable, and detail-oriented
• Experience managing basic IT, e.g. A/V setup and configuration
• Excellent written and verbal communication skills
• Ability to think strategically around trade-offs and short term vs. long term benefits
• 1+ years of experience in Information Security or Compliance Management

Desired Skills

• Beginner's knowledge of security practices and administration of security software (SentinelOne / Carbon Black)Ability to build and form strong relationships both internally and externally
• Experience administering software for distributed 100+ person team

$90,000 - $100,000 a year

Other Requirements

The individual working in this position:

• Must be legally authorized to work in the United States and meet any other requirements for government contracts for which they are hired.
• Candidates who are offered a job with Nava must possess work authorization that does not require sponsorship by their employer for a visa now or in the future.
• May be subject to a government security investigation and must meet eligibility requirements for access to classified information or applicants who are eligible for security clearances.

Perks working with Nava

• Monthly partial reimbursement for utilities (where applicable)
• Life and Accidental Death Insurance
• 401k contributions match at 4% of your salary
• 20 days of PTO accrued, 12 days paid federal holidays, 5 floating holidays, unlimited sick leave
• Commuter Benefits
• Employee referral program
• Sabbatical Leave
• 16 weeks of fully paid parental leave and weekly meal deliveries during leave
• Flexible work arrangements
• $1,000 new home office set up budget, monthly phone allowance
• Equity stock options
• $2,000 annual tuition and professional development budget, on top of a LinkedIn Learning license
• Diverse, inclusive, highly collaborative, and vibrant culture, fostering remote work!
• Your well-being is important to us, so we offer highly competitive benefits for medical, dental, and vision
• Short and Long-Term Disability Insurance

Location

We Also Have Fully Remote Options If You Reside In One Of The Following States

You can work in a hybrid work arrangement from one of Nava’s offices in NYC, DC, or San Francisco.

Alabama, Arizona, California, Colorado, DC, Florida, Georgia, Illinois, Louisiana, Maine, Maryland, Massachusetts, Michigan, Minnesota, North Carolina, New Jersey, New York, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Carolina, Texas, Tennessee, Virginia, Washington, Wisconsin.

• If you are not living in one of the states listed above, unfortunately, you will not be considered for a position at this time.

Stay in touch

Sign up for our newsletter to find out about career opportunities, new partnerships, and news from the broader civic tech community.

Nava PBC equal opportunity employer that is deeply committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, age, gender, religious or political beliefs, national origin or heritage, marital status, disability, sex, sexual orientation or gender identity, genetic information, pregnancy, status as a protected veteran or any characteristic protected by federal, state, or local laws. Our commitment to diversity, equity, and inclusion not only reflects our values as a public benefit corporation but also enriches our ability to do our work. Learn more about where we are today and hope to be by 2025.

Please contact the recruiting team at [email protected] if you would like to request reasonable accommodation during the application or interviewing process.

We participate in E-Verify. Upon hire, we will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. This role is required to work from the contiguous United States.