Develop and conduct risk assessment procedures for verification of RMF/Assessment and Authorization (A&A) safeguards to meet various regulatory requirements based upon government regulations and NIST 800 series (800-53, etc.) guidelines.
Author and provide oversight of various artifacts supporting RMF package artifacts to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Actions & Milestones (POA&M), Continuous Monitoring (ConMon) Plan, CONOPS, and other RMF BoE artifacts.
Coordinate with internal/external partners to establish system security designs and validate compliance requirements.
Responsible for analyzing and/or administering security controls for information systems.
Monitor IA Program compliance by performing periodic self-inspections, tests and reviews of the IS to ensure that systems are operating as authorized/accredited and that conditions have not changed.
Review audit data of the IS and IS components (technical & physical) for anomalous or unauthorized activities.
Conduct Cybersecurity training, briefings, and presentations for multiple levels of business.
Provide leadership and oversight to ISSOs.
Requirements
Bachelor’s Degree and minimum 9 years of prior relevant experience.
Graduate Degree and a minimum of 7 years of prior related experience.
In lieu of a degree, minimum of 13 years of prior related experience.
Must have an Active DoD Secret clearance with SCI eligibility
Relevant experience with various operating systems (e.g. Windows, Linux, UNIX, Solaris, Cisco), Windows server systems, system virtualization, and other related peripherals.
Experience using Microsoft Office products.
IAM Level III Certification (CISSP, CISM etc.)
Experience with RMF/Assessment and Authorization (A&A) safeguards to meet various regulatory requirements based upon government regulations and NIST 800 series (800-53, etc.)
Experience with DCSA Information system assessments, approvals and monitoring
Experience with SPLUNK, Security Center/Nessus, and other software/systems