Position Location: Lackland AFB TX (on-site)
Who are you? Security-cleared Professional: An active DOD Secret (S) Clearance is required to be considered for this position.
Education and Experience: You have a Bachelor's Degree and 8 years of related experience in addition to the following:
- Demonstrated experience supporting DoD cybersecurity governance processes including the Electronic Requirements Oversight Committee (eRoc), IT Data Oversight and Governance (IDOG), and Portfolio Management processes with associated documentation requirements.
- Hands-on experience developing and coordinating Capability Requirement Solution Planning Workbook (CRSP) documentation, Information Technology Scoping Worksheets (ITCSC), Privacy Impact Assessments (PIA), Privacy Confidentiality Impact Level (PCIL) determinations, Hardware/Software Lists, and Concept of Operations (CONOPS) documents.
- Working knowledge of Clinger Cohen Act (CCA) compliance, Business Enterprise Architecture (BEA) processes, Information Technology Portfolio Management System (ITIPS) registration, and Enterprise Mission Assurance Support Service (eMASS) registration and management.
- Demonstrated experience supporting DoD RMF processes per DoDI 8510.01, including all seven RMF lifecycle phases (Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor) and continuous monitoring activities.
- Proficiency in developing and maintaining comprehensive cybersecurity documentation including System Security Plans (SSP), Security Assessment Plans (SAP), Security Assessment Reports (SAR), Plans of Action and Milestones (POA&M), and Authorization to Operate (ATO) packages.
- Advanced experience using the Enterprise Mission Assurance Support Service (eMASS) platform for security control documentation, workflow management, compliance reporting, and coordination with Information System Security Managers (ISSMs), Program Managers, and System Owners.
- Working knowledge of NIST SP 800-37, NIST SP 800-53 (Rev 4 & 5), NIST SP 800-60, FIPS 199/200, and related federal cybersecurity policies, standards, and guidelines.
- Excellent communication and organizational skills with demonstrated ability to coordinate with System Requirement Owners, Authorizing Officials, and cross-functional teams.
- Proven ability to manage multiple cybersecurity assessment, authorization, and governance activities simultaneously while ensuring timely delivery of project objectives and maintaining quality standards.
Certifications: PMP certification from an accredited institution is preferred
What you'll do: - Assist the DLIELC System Requirement Owner with navigating and executing the Cybersecurity Assurance Readiness (CSAR) and RMF Pro processes, ensuring seamless coordination across Electronic Requirements Oversight Committee (eRoc), IT Data Oversight and Governance (IDOG), and Portfolio Management workflows.
- Support the Electronic Requirements Oversight Committee (eRoc) process.
- Lead IT Data Oversight and Governance (IDOG) process activities including preparation of Information Technology Scoping Worksheets (ITCSC), Privacy Impact Assessments (PIA), Privacy Confidentiality Impact Level (PCIL) determinations, Hardware/Software Lists, Concept of Operations (CONOPS) documents, Information Technology (IT) Worksheets, and CRSP documentation.
- Execute Portfolio Management process requirements including Information Technology Worksheet preparation, Clinger Cohen Act (CCA) compliance activities, Business Enterprise Architecture (BEA) process coordination, Information Technology Portfolio Management System (ITIPS) registration, and Enterprise Mission Assurance Support Service (eMASS) registration.
- Lead and coordinate all phases of RMF.
- Develop, review, and maintain System Security Plans, Security Assessment Plans and Reports, POA&Ms, Continuous Monitoring Strategies, and Authorization packages in accordance with DoD and NIST standards.
- Perform data entry, updates, and reporting using eMASS; coordinate workflows with ISSMs, Program Managers, and System Owners; document technical mitigations and control implementation steps.
- Monitor security control effectiveness, conduct security impact assessments for system changes, facilitate issue resolution processes, document risk-based decisions including risk acceptance and remediation actions, and maintain audit trails for management accountability.
- Facilitate executive meetings, briefings, and engage with internal and external stakeholders including System Requirement Owners and AO's.
- Coordinate security control assessments, vulnerability scanning activities, remediation efforts, and support preparation ATO.
- Implement and maintain continuous monitoring strategies per NIST SP 800-137.
- Provide centralized program management oversight to ensure effective execution of all CSAR, RMF, and cybersecurity governance activities.
What matters to you matters to us.Fusion Technology values its employees and works hard to ensure proper care for them and their families. We desire to compensate employees in a competitive, motivational, fair, and equitable way with other employers in the marketplace. Salary is only one component of employee compensation but an integral part of recruiting and retaining qualified employees. However, at Fusion Technology, we take a comprehensive approach and consider each employee's needs to tailor a compensation plan that provides financial security and peace of mind. Our competitive package includes a best-in-class matching 401K program, a comprehensive healthcare plan through Cigna, a competitive employer contribution to a health savings account, vision and dental plans, life insurance, short- and long-term disability, and personal leave, in addition to paid certifications and training.
