Description
We are seeking a Senior Cybersecurity Assessment Specialist to conduct comprehensive assessments of management, operational, and technical security controls employed within or inherited by an information system.
Responsibilities include:
- Performing oversight of the development, implementation, and evaluation of IS security program policy
- Conducting assessments of ISs based on the Risk Management Framework (RMF) methodology
- Advising the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and the Delegated and/or Authorizing Official (DAO/AO) on assessment and authorization issues
- Evaluating Authorization packages and making recommendations to the AO and/or DAO for authorization
- Assessing proposed changes to Authorization boundaries operating environment and mission needs
- Reviewing and concurring with all sanitizations and clearing procedures
- Assisting the Government with compliance inspections and security incidents
- Ensuring organizations are addressing and conducting all phases of the system development life cycle (SDLC)
- Evaluating Hardware and Software to determine security impact
- Representing the customer on inspection teams
Requirements:
- 7+ years of related experience
- Prior performance in the role of ISSO and ISSM or SCA
- Minimum of four (4) years' experience in SAP, SCI or Collateral Information Systems (IS) Security
- Bachelor's degree in a related discipline OR Associate's degree in a related area + 2 years' experience OR equivalent experience (4 years)
- Information Assurance Technician Level III or Information Assurance Manager Level II certification
- Top Secret/SCI clearance with willingness to obtain a polygraph