Information Assurance / RMF Compliance Specialist

Skills
DatabasesEnterprise SystemsICAMIdentity And Access ManagementInformation AssurancePort OperationsRisk Management Framework
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • 8 years experience with BS/BA or 6 years with MS/MA or 3 years with PhD
  • Must be able to obtain and maintain a Public Trust
  • U.S. Citizenship required
  • One certification required: CISSP SSCP CySA+ or CASP+
  • Strong technical writing skills
  • Hands-on eMASS experience including artifact management and Implementation Plan
  • Experience performing RMF requirements analysis
  • Experience applying STIGs to web apps databases operating systems and network devices
  • Experience supporting incident response processes
  • Experience supporting cloud security compliance in a DoD environment
  • Strong understanding of system and network design concepts
  • Strong understanding of DoD application cyber hardening and static code analysis principles

Day to day

  • Develop and maintain Information Assurance policies and SOPs aligned with RMF and DoD requirements.
  • Manage and update the System Security Plan Implementation Plan and related compliance artifacts in eMASS.
  • Support continuous monitoring POA&M tracking cyber hardening approvals and collaboration with cross-functional teams.

Hiring process

  • Submit application
  • Participate in review of application
  • Attend on-camera interview if required
  • Complete identity verification process