This is a fully remote position, open to applicants in California.

📋 Description

• Act as the principal subject matter expert in cybersecurity and financial compliance for the Vantage system.

• Interpret and implement NIST SP 800-53 Rev. 5, Department of War/Army cybersecurity requirements, Financial Management overlays, and Financial Improvement and Audit Readiness (FIAR) requirements.

• Evaluate the security and compliance status of Vantage by reviewing controls, evidence of implementation, processes, and system documentation.

• Identify deficiencies in controls and compliance gaps, and formulate actionable remediation strategies.

• Create, sustain, and enhance security policies, standard operating procedures, tactics, techniques, and procedures, as well as governance documentation.

• Lead the development, collection, validation, and maintenance of security and financial audit evidence and compliance artifacts.

• Offer guidance on the implementation, inheritance, assessment, and continuous monitoring of NIST SP 800-53 Rev. 5 controls.

• Support and advocate for the compliance posture of Vantage during cybersecurity assessments, control validations, financial audits, FIAR activities, and formal reviews.

• Address findings, coordinate corrective actions, and track remediation until completion.

⛳️ Requirements

• Bachelor's degree.

• Over 8 years of experience in Cybersecurity / Risk Management Framework (RMF).

• Active DoD Secret security clearance.

• Certified Information Systems Security Professional (CISSP).

• Hands-on experience with NIST 800-53 Rev. 5 security and privacy controls in Department of War and Army operational settings.

• Expert-level proficiency with Enterprise Mission Assurance Support Services (eMASS), including System Registration, Control Tracking, Vulnerability Management, and Package Generation.

• Expertise in Financial Management overlays and a comprehensive understanding of FIAR mandates for enterprise software and data systems.

• Outstanding skills in drafting security policies, Standard Operating Procedures (SOPs), and Tactics, Techniques, and Procedures (TTPs).

• Experience in preparing and managing compliance artifacts and defending system posture during formal security assessments and financial audits.

• Must be based in the U.S.