You will manage the assessment and authorization (A&A) process to ensure compliance with Federal Cybersecurity policies.
Responsibilities
Develop and maintain security artifacts including System Security Plans (SSP), Security Assessment Reports (SAR), Risk Assessment Reports (RAR), Security Control Traceability Matrix (SCTM), and Plan of Action and Milestones (POA&M).
Assess architectural designs for on-premise and cloud-based solutions against NIST 800-53 and DoD policies.
Review vulnerability scan results at the OS and application levels to architect and implement mitigations.
Consult on system design, development, and implementation for cybersecurity projects.
Capture requirements for government security solutions in collaboration with stakeholders.
Support FISCAM, FIAR, and FFMIA audits.
Required Skills
5+ years of experience in creation, consultation, and ongoing assessment and authorization (A&A) documentation.
Expertise in NIST 800-53 security controls and DoD 8500 guidelines.
Deep knowledge of Risk Management Framework (RMF) practices and principles.
Experience developing SCMT, SAR, and POA&M documentation.
Ability to obtain an IT2 or Secret security clearance.
US Citizenship is required.
Bachelor's degree.
Willingness to travel every 3-6 months.
Preferred Skills
Experience with Sales Management relationship development.