Senior Cybersecurity Internal Controls Administrator

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Deliver Enterprise eMASS and RMF services.

• Create RMF packages.

• Manage asset inventories and categorizations.

• Organize and coordinate system validation reviews.

• Produce artifacts to facilitate control compliance.

• Analyze ACAS and STIG reports and oversee remediation activities.

• Develop, monitor, and maintain Plan of Action and Milestones (POA&M) documentation.

• Conduct annual security assessments.

• Engage in Continuity of Operations (COOP) and Incident Response testing.

• Keep records for Army PPSM and Circuit Registry.

• Take part in Software Assurance reviews.

• Document ongoing Software Assurance issues through eMASS POA&M.

• Provide support for mission-critical Army IT services across enterprise data centers and cloud-hosted settings.

⛳️ Requirements

• Cybersecurity Certification (such as CISSP or an equivalent credential).

• Current DoD Secret Security Clearance.

• At least 10 years of experience in Cybersecurity and RMF-related fields.

• Comprehensive experience with Enterprise eMASS and RMF services.

• Skilled in developing RMF packages and managing asset inventories and categorizations.

• Capable of scheduling and coordinating system validation reviews.

• Experience in generating artifacts for control compliance support.

• Familiarity with ACAS and STIG reports and managing remediation efforts.

• Proficient in creating, tracking, and maintaining Plan of Action and Milestones (POA&M).

• Competent in conducting annual security assessments.

• Active participation in Continuity of Operations (COOP) and Incident Response testing.

• Proficient in maintaining Army PPSM and Circuit Registry records.

• Experience in Software Assurance reviews and documenting items via eMASS POA&M.

• Knowledge of security compliance and control documentation.

• Familiarity with DoDI 8500.01, DoDI 8510.01, and AR 25-2.

• Experienced with Army enterprise monitoring tools and practices.

• Understanding of security regulations and industry best practices.

• Experience with incident response activities.

• Knowledge of Continuity of Operations Plans and Communication Plans.

• A Bachelor's degree in Computer Science is preferred; equivalent years of cybersecurity and RMF experience will be accepted in lieu of a degree.

🏝️ Benefits

• Acknowledged as a 2024 Military Friendly Employer.

• Recruitment and support for active-duty and veteran personnel.