Information Assurance Analyst, Senior P58

Overview Of Position

We are looking for an Information Assurance Analyst, Senior to work in Indianapolis, IN.

Responsibilities

• Lead Information Assurance support for DFAS CCE achieving 96% CIO suspense date compliance
• Perform periodic security assessments IAW DoD RMF Process and FISMAS
• Sustain ATO and ATC achieving 100% maintenance
• Obtain 100% validator concurrence from DFAS CIO for actions taken
• Document results in Enterprise Mission Assurance Support Service (eMASS)
• Ensure all calendar actions completed and posted to eMASS
• Support FISCAM compliance audits achieving 95% control pass rate
• Create RMF artifacts: SOPs, IRP, COOP, CMP, DD2875s, ATO/IATO/ATC documentation
• Coverage of mitigation of non-compliance issues within CCES
• Support IA for DFAS CCE (mission cloud and on premise) and teleservices systems

Qualifications

• 8+ years Information Assurance/cybersecurity compliance experience
• DoD 8140 Work Role 722 Information Systems Security Manager (ISSM)
• Intermediate qualification Expert knowledge of DoD Risk Management Framework (RMF)
• Experience with FISMA compliance and annual control testing
• Proficiency with eMASS documentation and workflows
• Experience supporting FISCAM audits
• Experience with ATO/IATO/ATC processes and requirements
• Experience creating RMF artifacts and security documentation
• Understanding of DIA requirements for JWICS

Preferred Qualifications

• CISSP or CISM certification
• CAP (Certified Authorization Professional) certification
• Experience with DFAS IA programs
• Prior DoD A&A/RMF experience
• Knowledge of SSAE audit requirements
• FedRAMP authorization experience

Education

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications

• CGRC (formerly CAP)
• CompTIA CASP+
• (ISC)² CCSP
• CompTIA Cloud+
• CompTIA Security+
• GIAC GSEC

Clearance

Active Top-Secret/SCI clearance is required. Must be a United States Citizen and pass a background check. Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).