IA Policy & Compliance Certified

Primary Responsibilities

• Improve the effectiveness of command owned information system-related cybersecurity risks management and reporting (contained in highly diverse environments of complex and sophisticated cyber threats, with ever-increasing system vulnerabilities, and rapidly changing missions)
• Serve as the Cyber Privacy IA Specialist
• Possess an understanding of Risk Management Framework (RMF)
• Leverage the information/data findings and reports from the service provider, system owner, ISSM and the accreditation data repository; the regulatory guidelines in the cybersecurity regulatory documentation; and recent threat briefings; perform a detailed Risk Assessment Analysis that is not limited to:
• Update eMASS with the risk assessment information as applicable based on security classification levels.
• Maintain the eMASS record of each command owned information system or software.
• System-level artifacts (e.g. Continuous Monitoring Strategy, Continuity of Operations Plan, Interconnection Agreements, Hardware and Software Lists) analysis of cybersecurity controls compliance.
• Maintain System ISSM/ISSO established POA&Ms.
• Maintain legacy system accreditation documentation.
• Perform Continuous Monitoring of the system controls processes:
• Review and provide ISSM, SO and SCA with recommendations on new/updated system Security Plan details: system, system boundaries, identification, controls identification and selection, subsystems details, and external services

Required Qualifications

• Secret security clearance
• DoD 8570.IAT Level II Certification
• 2 years of professional experience in Cybersecurity or IT programs
• Bachelor’s degree in an IT, engineering, or technical discipline

Preferred Qualifications

• Cyber Operations Center experience in operational measures and management
• NIST 800-53 and CNSSI 1253 knowledge and application experience
• ACAS Scanner knowledge
• IAM Level III Certification