The Role
Administer and configure enterprise Governance, Risk, and Compliance platforms supporting hundreds of users. Responsibilities include database administration, SQL queries, XML and delimited-file processing, SSRS, user access and RBAC, workflows, modules, change control, configuration management, and risk assessment support. The role also involves information security best practices, cybersecurity modernization, stakeholder coordination, technical leadership, knowledge transfer, and potentially Microsoft SOC, IAM, Zero Trust, security automation, AI-enabled operations, and regulatory compliance initiatives.
Summary Generated by Built In
1-YEAR BASE TERM, WITH POTENTIAL 1-YEAR EXTENSION. WORK WILL BE PERFORMED REMOTELY.
Mandatory Requirements
- At least seven (7) years within the last ten (10) years of professional database administrator experience and a working understanding of relational database relationships.
- At least seven (7) years within the last ten (10) years of professional experience and understanding of compound queries (inner and outer joins).
- At least seven (7) years within the last ten (10) years of professional experience and understanding of eXtensible Markup Language (XML).
- At least seven (7) years within the last ten (10) years of professional experience and understanding of Structured Query Language (SQL) Server Reporting Services (SSRS).
- At least seven (7) years within the last ten (10) years of professional experience and understanding of delimited text files.
- At least seven (7) years within the last ten (10) years of professional experience in change control and configuration management, including maintaining change management documentation.
- At least seven (7) years within the last ten (10) years of professional experience administering user accounts and assigning permissions—create, read, update, and delete (CRUD)—and role-based access control (RBAC) for a Governance, Risk and Compliance (GRC) platform supporting hundreds of users.
- At least seven (7) years within the last ten (10) years of professional experience working with Governance, Risk, and Compliance (GRC) platforms (such as CAL-CSIRS, RSA Archer, ServiceNow, or equivalent), including configuration of modules, data fields, workflows, and handlers.
- At least seven (7) years within the last ten (10) years of professional experience administering GRC modules such as Incident Management, Security Event Notification (SEN), and Risk Assessment.
- Working knowledge of IT and information security industry trends and best practices.
Desirable Requirements
- Any professional experience conducting risk assessments for an IT environment with business units to support a diverse set of infrastructure and services.
- Working knowledge of the National Institute of Standards and Technology (NIST) Standards, the NIST Cybersecurity Framework, and NIST Special Publication (SP) 800-53 and other regulatory security standards and frameworks.
- Possession of one or more of the following information technology industry certifications:
- Security Operations & Engineering (Microsoft): Microsoft Security Operations Analyst (SC-200), Azure Security Engineer Associate (AZ-500), Cybersecurity Architect Expert (SC-100), Identity and Access Administrator Associate (SC-300), Azure Administrator Associate (AZ-104), or Security, Compliance, and Identity Fundamentals (SC-900);
- Governance, Risk & Audit: CISM, CISSP, CISA, CRISC, or CGRC (Certified in Governance, Risk, and Compliance / formerly CAP);
- Cloud Security: CCSP (Certified Cloud Security Professional), AWS Certified Solutions Architect, or AWS Certified Security – Specialty;
- SOC / Blue-Team / Incident Response: Any GIAC certification (e.g., GSEC, GCIH, GCDA, GMON, or GCFA), CompTIA Security+, or CompTIA CySA+.
- SIEM / SOAR Platforms: Splunk certifications (e.g., Core Certified Power user or Enterprise Security Certified Admin), or Palo Alto Networks Certified XSIAM Engineer;
- Project & Agile Delivery: PMP, PMI-ACP, or SAFe Scrum Master (SSM).
- Ten (10) years within the last fifteen (15) years of experience supporting statewide cybersecurity operations and modernization initiatives within a California State agency.
- Ten (10) years within the last fifteen (15) years of experience with Agile/Scrum delivery and tools such as Azure DevOps (ADO).
- Demonstrated leadership experience establishing and leading technical teams and overseeing the delivery of multiple (two or more) enterprise identity and access management (IAM) and cybersecurity initiatives from concept through implementation and ongoing operations, including at least one initiative incorporating AI/automation or other emerging technologies. Experience should include cross-functional stakeholder coordination and full-lifecycle delivery at an enterprise or public-sector scale.
- Depth operating a Microsoft-native SOC at scale – Sentinel + Defender XDR in a multi-tenant / MSSIP or enterprise environment.
- AI/GenAI applied to security operations SOC automation, detection engineering, or LLM triage.
- Zero Trust and identity governance (IGA) delivery Entra ID Governance, SailPoint, or Saviynt implementations.
- Security automation / SOAR playbook development (Azure Logic Apps, XSIAM, Splunk, SOAR).
- Public-sector compliance depth StateRAMP/FedRAMP, CJIS, or California SAM/SIMM 5300 experience.
- Knowledge transfer / mentoring of State staff.
Applications that do not complete the Prescreen Survey will not be considered.
Anvaya Solutions, Inc. is an equal opportunity employer. All employment decisions, including hiring, promotions, and compensation, are made without regard to race, color, religion, sex, national origin, or any other protected characteristic. We are committed to a merit-based workplace where every individual is treated with respect and has equal access to opportunities based solely on their qualifications and performance.
Skills Required
- At least seven years within the last ten years of professional database administrator experience and understanding of relational database relationships.
- At least seven years within the last ten years of professional experience with compound queries, including inner and outer joins.
- At least seven years within the last ten years of professional experience with Extensible Markup Language (XML).
- At least seven years within the last ten years of professional experience with SQL Server Reporting Services (SSRS).
- At least seven years within the last ten years of professional experience with delimited text files.
- At least seven years within the last ten years of professional experience in change control and configuration management, including change management documentation.
- At least seven years within the last ten years administering user accounts, CRUD permissions, and RBAC for a GRC platform supporting hundreds of users.
- At least seven years within the last ten years working with GRC platforms such as CAL-CSIRS, RSA Archer, ServiceNow, or equivalent.
- At least seven years within the last ten years configuring GRC modules, data fields, workflows, and handlers.
- At least seven years within the last ten years administering Incident Management, Security Event Notification, and Risk Assessment GRC modules.
- Working knowledge of IT and information security industry trends and best practices.
- Professional experience conducting IT-environment risk assessments with business units.
- Working knowledge of NIST standards, the NIST Cybersecurity Framework, NIST SP 800-53, and other regulatory security frameworks.
- One or more relevant certifications, such as CISM, CISSP, CISA, CRISC, CGRC, CCSP, Security+, CySA+, GIAC, Microsoft security certifications, AWS security certifications, Splunk, XSIAM, PMP, PMI-ACP, or SAFe Scrum Master.
- Ten years within the last fifteen years supporting statewide cybersecurity operations and modernization initiatives within a California State agency.
- Ten years within the last fifteen years of Agile/Scrum delivery experience with tools such as Azure DevOps.
- Leadership experience establishing technical teams and delivering multiple enterprise IAM and cybersecurity initiatives through implementation and ongoing operations.
- Experience delivering at least one enterprise IAM or cybersecurity initiative incorporating AI, automation, or emerging technologies.
- Experience operating a Microsoft-native SOC at scale using Sentinel and Defender XDR.
- Experience applying AI or generative AI to SOC automation, detection engineering, or LLM triage.
- Experience delivering Zero Trust and identity governance implementations using Entra ID Governance, SailPoint, or Saviynt.
- Experience developing security automation or SOAR playbooks using Azure Logic Apps, XSIAM, Splunk, or SOAR platforms.
- Experience with StateRAMP, FedRAMP, CJIS, or California SAM/SIMM 5300 compliance.
- Knowledge transfer and mentoring experience.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Founded in 2007, Anvaya Solutions is an award-winning, woman-owned CMMI Level 3 cyber security and information assurance consulting firm. The company is dedicated to helping organizations across both public and private sectors enhance their security posture, protect their reputation, and increase compliance with regulations while reducing the risk of financial losses and liability from security breaches through its expertise in consulting, assessments, and training.
.png)
