Qualifications

• Familiarity with the RMF lifecycle, eMASS processes, and DISA STIG requirements.
• Experience supporting cybersecurity or information assurance programs within enterprise environments.
• Strong organizational skills for maintaining compliance documentation and managing audit processes.
• Ability to analyze security requirements and translate them into actionable compliance tasks.
• Excellent written and verbal communication skills for working with diverse stakeholders.
• Ability to obtain and maintain a Public Trust (Tier 3/NACLC) clearance.

Responsibilities

• Maintain and update security documentation, accreditation artifacts, and compliance records.
• Support activities related to the Risk Management Framework (RMF), including continuous monitoring, control assessments, and compliance reporting.
• Track and manage user access controls, enforce security policies, and maintain secure system configurations.
• Conduct Information Assurance (IA) awareness training for users and stakeholders.
• Prepare for audits and inspections, ensuring accurate documentation and timely responses to findings.
• Collaborate with enterprise management, system administration, and endpoint security teams to maintain compliant and secure IT environments.
• Utilize tools such as eMASS to document RMF security controls and evidence of compliance.

Benefits

• Opportunity to contribute to cybersecurity compliance and audit readiness for mission-critical IT systems.
• Remote work flexibility available across U.S. and Puerto Rico.
• Work within a large-scale federal IT environment.
• Chance to enhance skills in compliance documentation and auditing processes.
• Engage with diverse teams in the cybersecurity field.