Information Assurance Analyst, Senior P59
FEDITC · Indianapolis, IN · 5 mo ago
Information TechnologyFull-time
Responsibilities
- Provide senior Information Assurance support for DFAS CCE NIPRNet enclave
- Perform periodic security assessments IAW DoD RMF Process and FISMAS
- Sustain ATO by obtaining and sustaining ATO
- Document and validate IT general controls applicable to CCE infrastructure
- Support FISCAM compliance audits (internal and external)
- Create and maintain RMF documentation and artifacts
- Coordinate and update process documentation to address control deficiencies
- Test and record results for annual self-assessment testing
- Review checklists for C&A processes (validations, DIP, SIP, POA&M, C&A checklist, scorecard)
- Support DSN SNAP database submissions
Qualifications
- 8+ years Information Assurance/cybersecurity compliance experience
- DoD 8140 Work Role 722 Information Systems Security Manager (ISSM)
- Intermediate qualification
- Strong knowledge of DoD Risk Management Framework (RMF)
- Experience with FISMA compliance and control testing
- Proficiency with eMASS documentation
- Experience supporting FISCAM and internal audits
- Knowledge of IT general controls and audit requirements
- Experience creating security documentation and artifacts
- Understanding of POA&M management
Preferred Qualifications
- CISSP or CISM certification
- CAP certification
- Experience with DFAS IA programs
- Prior DoD A&A/RMF experience
- Audit background or experience
- Knowledge of SSAE requirements
- Experience with NIPRNet authorization
Education
- Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field
Certifications
- CGRC (formerly CAP)
- CompTIA CASP+
- (ISC)² CCSP
- CompTIA Cloud+
- (ISC)² SSCP
- CompTIA Security+
- GIAC GSEC
Clearance
- Active Secret Clearance is required.
- Must be a United States Citizen and pass a background check.
- Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).