Risk Assurance SME

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate with engineering stakeholders to clarify DHA risk assessment procedures and guarantee the submission of high-quality risk assessment packages for review and approval by the DHMSM ISSOs and DHA RMED.

• Coordinate and evaluate risk assessment documents (POAMs, STIG/SRG Checklists, False Finding artifacts), offering constructive feedback to engineering teams.

• Monitor and assist with risk assessments in partnership with the Cyber Assurance Lead.

• Conduct internal and external project meetings, delivering updates on progress and key milestones.

• Aid in the creation and upkeep of the Integrated Master Schedule (IMS) for projects as necessary.

• Utilize established intake procedures for new risk assessments, ensuring effective collaboration with engineering teams and the DHMSM Cyber team.

• Supervise and manage risk assessment activities involving third-party resources to ensure they align with program goals.

• Employ tools and solutions to automate tasks and visualize metrics, reporting, and dashboards.

• Organize daily meetings with stakeholders as required, applying a scrum methodology for escalated risk assessments.

• Evaluate and communicate recognized and projected project risks.

⛳️ Requirements

• Must be a U.S. Citizen with a current U.S. Government Secret clearance (contract requirement).

• Bachelor’s degree accompanied by 4–8 years of relevant experience.

• Possession of DoD 8570 IAM Level 1 or IAT Level 2 certification, or the capability to obtain it within 6 months of hire.

• Exceptional written and verbal communication abilities.

• Strong analytical and critical thinking skills.

• Capacity to organize and prioritize multiple requests in a dynamic, deadline-oriented environment.

• Proficiency in Microsoft Office applications and project management tools such as JIRA.

• Experience in identifying relevant STIG checklists based on evaluated technologies, performing STIG compliance assessments, and analyzing Check Text and Fix Text to verify security control implementation and remediation requirements.

• Ability to assess POA&M data for precision and relevance, ensuring that findings, remediation details, and statuses are accurately documented.

🏝️ Benefits

• Competitive compensation.

• Health and wellness programs.

• Income protection.

• Paid leave.

• Retirement.