Senior Cybersecurity Internal Controls Administrator

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Deliver Enterprise eMASS and RMF services in accordance with DoWI 8500.01, DoWI 8510.01, and AR 25-2

• Create RMF packages while maintaining asset inventories and system categorizations

• Organize and schedule system validation reviews

• Produce artifacts that aid in control compliance

• Analyze ACAS and STIG reports and facilitate remediation efforts

• Develop, monitor, and uphold Plans of Action and Milestones (POA&Ms)

• Conduct annual security assessments

• Engage in COOP and Incident Response testing

• Preserve Army PPSM and Circuit Registry documentation

• Record Software Assurance review items within eMASS POA&Ms

• Provide support for enterprise Army systems operating 24x7x365

⛳️ Requirements

• At least 12 years of experience without a degree; minimum of 10 years with an AS/AA; minimum of 8 years with a BS/BA; minimum of 6 years with an MS/MA

• DoD 8140 certification for DCWF 722 – Information Systems Security Manager at the Intermediate proficiency level

• Active DoW Secret security clearance

• Must be a US Citizen

• Over 5 years of experience in cybersecurity and RMF-related fields

• Substantial experience with Enterprise eMASS and RMF services

• Expertise in developing RMF packages and managing asset lists and categorizations

• Capability to schedule and coordinate system validation reviews

• Proven experience in generating artifacts that support control compliance

• Familiarity with ACAS and STIG reports and coordinating remediation actions

• Experience in creating, tracking, and managing POA&Ms

• Ability to carry out annual security reviews

• Involvement in COOP and Incident Response testing

• Competence in maintaining Army PPSM and Circuit Registry records

• Participation in Software Assurance reviews and documenting findings through eMASS POA&Ms

• Experience with security compliance and control documentation

• Bachelor's degree in Computer Science or equivalent experience (preferred)

• ISC2 CGRC (formerly CAP); 8140-approved for 722 at the Intermediate level (preferred)

• Familiarity with DoWI 8500.01, DoWI 8510.01, and AR 25-2 (preferred)

• Experience with Army enterprise monitoring tools and incident response operations (preferred)

• Understanding of Continuity of Operations Plans and Communication Plans (preferred)

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Life insurance

• Health savings account

• Short-term disability

• Long-term disability

• Employee Assistance Program (EAP)

• Parental leave

• 401(k)

• Paid time off (PTO) for vacation

• Company-paid holidays

• Potential for overtime

• Potential shift differential

• Discretionary bonus