Job Type
Full-time
Description
As the primary cybersecurity and compliance lead, you will manage complex IT and intelligence communication systems through the full Risk Management Framework (RMF) lifecycle. In this role, you will maintain secure operations, sustain continuous Authority to Operate (ATO) status, manage security postures within eMASS, and execute robust security governance in direct coordination with Authorizing Officials (AOs) and Program Information System Security Managers (P-ISSMs).
Requirements
Key Responsibilities- RMF Lifecycle Management: Lead all aspects of the Risk Management Framework (RMF) process from system categorization and security control selection to implementation, assessment, and authorization, ensuring continuous Authority to Operate (ATO).
- Security Documentation: Develop, maintain, and update vital RMF documentation, including the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).
- eMASS Administration: Manage the system's security posture within the Enterprise Mission Assurance Support System (eMASS), ensuring data accuracy and prompt workflow approvals.
- Continuous Monitoring: Implement and manage robust continuous monitoring strategies to actively assess security control effectiveness, track vulnerabilities, and manage configuration changes.
- Stakeholder Coordination: Serve as a primary security advisor to system owners, liaising with Authorizing Officials (AO/AODR) and Program Information Security System Managers (P-ISSM) to navigate the Assessment and Authorization (A&A) process and remediate STIG findings.
- Compliance & COMSEC Support: Assist in developing cybersecurity programs, reviewing external policies, and ensuring adherence to DoD, Army, and NIST regulations.
Minimum Qualifications- Experience: Minimum of 5+ years of dedicated, hands-on experience applying RMF to complex Department of Defense (DoD) IT systems.
- Certifications: Must possess current, industry-standard certifications meeting DoD 8570/8140 requirements for IAT Level II (e.g., CompTIA Security+, CCNA, RHCSA, MCSA).
- Technical Skills: Demonstrated mastery of eMASS, vulnerability scanning tools (e.g., ACAS/Nessus), COMSEC, and security compliance checkers (e.g., SCAP).
- Security Clearance: Must possess and actively maintain a Top Secret/SCI security clearance.
- Citizenship: Must be a U.S. citizen.
