A&A Analyst (ISSO)

About the role

Support the DoD customer’s Cybersecurity Assess & Authorize (A&A) group, ensuring that all information systems are authorized by the Authorizing Official (AO) and that technologies are assessed prior to introduction into the network.

Responsibilities

• Support multiple Authorizations to Operate (ATOs)/systems per DoDI 8510.01, NIST SP 800-30, and NIST SP 800-37
• Support authorization efforts of approximately seven (7) packages on an annual basis
• Develop a Risk Management Framework (RMF) Executive Package for each Authorization that will include:
  • System Security Plan
  • Security Assessment Report (SAR)
  • Plans of Actions and Milestones (POA&M)
  • Risk Assessment Report (RAR)
  • Authorization Decision Document
• Register systems in the Enterprise Mission Assurance Support Service (eMASS) application
• Utilize the eMASS application to support and automate the RMF
• Register and maintain all Agency connections into SNAP
• Provide monthly and annual SNAP registration metrics

Requirements

• Active Secret security clearance
• At least 8-10 years of related experience
• DoD IAM III required certification/s (one of the following):
  • CISM
  • CISSP (or Associate)
  • GSLC
  • CCISO