Cyber security and Risk management Analyst- Active secret clearance

Serves as a cybersecurity analyst with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures.

Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process.

Possess an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization s IT infrastructure such as DoD, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes.

Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications to the system s current or future authorization.

Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.

Requirements

• Experience: Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD cybersecurity experience
• Experience in assessing security controls and conducting authorization reviews for large, complex organizations

• Clearence: Secret
• 8570/8140: DoD Approved 8570 Baseline Certification: Category IAM Level III