Information Assurance Compliance Analyst - 30426

We need to output HTML fragment with sections: h3 for headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. Must not repeat job title as heading. Must not include Job ID etc. Must preserve all substantive info, remove boilerplate (cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions). Also remove "Physical Requirements" maybe? It's not one of the allowed headings; but we could include if relevant? The instruction says use h3 for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but likely we should stick to those. Physical Requirements maybe not needed; but we could include under Requirements? Might be considered part of Requirements. However we must not invent sections. We'll include sections that have content: About the role (summary), Responsibilities (Key Job Responsibilities), Requirements (What You Must Have), Qualifications (Preferred Qualifications), Skills (maybe combine some?), Benefits (benefits described), Pay (Anticipated Salary Range), Schedule (maybe travel? but schedule not given; we have travel 11-25% and remote/hybrid schedule; maybe we can include Schedule as hybrid schedule and remote/telework discretion). The posting includes "Required Travel: 11 - 25%" and "Ability to work onsite at Dam Neck, Virginia Beach, VA hybrid schedule. Remote/telework is at the discretion of the government." Also "Expected travel up to 10-15% of time for approximately one week per trip". So schedule/hybrid info can go under Schedule. We must not include placeholder text like "commensurate with experience". Not present. We need to preserve all substantive info. Must not invent or summarize away detail. So we need to include details like responsibilities list, requirements list, preferred qualifications, benefits list, pay range, schedule/travel info. We must remove boilerplate: EEO statement, accommodation contact, etc. Also remove "Find the role that’s right for you. Apply today." etc. Also remove "To learn more about Mission Technologies, click here for a short video". Also remove "HII is more than a job - it’s an opportunity..." etc. Also remove "Why HII" paragraph. Also remove "All qualified applicants will receive consideration..." etc. Also remove "Do You Need Assistance?" etc. Also remove "Physical Requirements" maybe? It's substantive but not under allowed headings; we could incorporate into Requirements or maybe omit? The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." So we must keep Physical Requirements info somewhere. Could put under Requirements or maybe a separate section but not in allowed list; but we could still include as a

without heading? The instruction says use h3 for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but says "Use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." That suggests we should use those headings for sections; but we could also have other headings if needed? Safer to embed Physical Requirements into Requirements or maybe as a

under Requirements. We'll include it as part of Requirements paragraph. Similarly, "Leadership Mindset at HII – Mission Technologies Role Leadership..." is substantive but maybe not needed? It's about company values; could be considered part of About the role? Might be considered boilerplate? It's not EEO but still generic. Might be considered part of About the role? The instruction says preserve ALL substantive information; do NOT invent or summarize away detail. So we need to keep that content too. Could include under About the role as a paragraph. We also have "Mission Technologies’ Global Security (GS) group comprises live, virtual, constructive (LVC) solutions; fleet sustainment; nuclear and environmental; and Australia business." etc. That's also substantive about the group. Could be part of About the role. We need to avoid duplication: there are repeated lines like "Expected travel up to 10-15% of time..." and earlier "Required Travel: 11 - 25%". We'll keep both but maybe combine? We must preserve all substantive info; not summarizing away detail. Could keep both as separate sentences. We must not include application instructions like "Apply today." etc. We must not include cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. So remove EEO statement at end, accommodation contact, etc. Now craft HTML. Structure:

About the role

... summary paragraph(s) ...

Responsibilities

• ... each responsibility ...

Requirements

• ... each mandatory requirement ...

Maybe also include Physical Requirements as a

under Requirements? Could add a

for physical requirements? But physical requirements are not a requirement but a condition. Could add a

after list.

Qualifications

• ... preferred qualifications ...

Skills

Maybe we can list skills from preferred qualifications? But we already have qualifications. Could combine? The instruction says prefer a few substantive sections over many thin ones. So maybe we skip Skills section and put skills under Qualifications or Responsibilities. But we have separate headings list; we could include Skills if we have content. We have skills like "Strong analytical and documentation skills", "Ability to communicate effectively", "Attention to detail". Those are in Preferred Qualifications. Could move them to Skills section. But then we would duplicate. Better to keep Qualifications and maybe not have Skills. Since we already have Qualifications covering preferred qualifications, we can skip Skills.

Benefits

• ... benefits ...

Pay

Anticipated Salary Range: $74,074.00 - $105,820.00

Schedule

Required Travel: 11 - 25% (expected travel up to 10-15% of time for approximately one week per trip). Hybrid schedule: ability to work onsite at Dam Neck, Virginia Beach, VA; remote/telework at the discretion of the government.

We need to ensure we didn't miss any substantive info: The summary about Mission Technologies division, Global Security group, leadership mindset, etc. We'll include in About the role. Let's extract About the role content: From posting: "Mission Technologies’ Global Security (GS) group comprises live, virtual, constructive (LVC) solutions; fleet sustainment; nuclear and environmental; and Australia business. As a trusted partner to our military customers, HII designs, develops and operates the largest LVC enterprise that prepares warfighters for cross-domain battle. With advanced technologies to enable mission readiness, HII understands that preparation requires full coordination—not readiness in piece-parts. For more than 40 years, the U.S. Navy has entrusted HII to maintain and modernize the vast majority of its fleet. With a holistic approach to life-cycle maritime defense systems—from small watercraft to submarines, surface combatants and aircraft carriers—HII ensures a high state of readiness. HII supports the Department of Energy’s national security mission through the management and operation of its sites, as well as the safe cleanup of legacy waste across the country. HII meets clients’ toughest nuclear and environmental challenges. Leadership Mindset at HII – Mission Technologies Role Leadership at HII is a mindset, not a title. Through our Leadership Capability Framework, we define how every employee grows, leads, and contributes—regardless of role. It sets the standard for how you can develop yourself and what you can expect from leaders across our organization. We look for candidates who want to grow in alignment with these capabilities: Know & Grow Your People – Commit to learning and supporting team success.Build Relationships – Communicate openly, collaborate well, and build trust.Take Ownership – Deliver on commitments and take pride in your work.Customer First – Focus on the mission and those we serve.Shape the Future – Bring ideas, curiosity, and continuous improvement.Act with Urgency – Take initiative and follow through with purpose. These capabilities guide how all employees contribute to our shared success across Mission Technologies. Summary HII's Mission Technologies division is currently seeking a Information Assurance Compliance Analyst to support Naval Surface Warfare Center Dahlgren Division (NSWCDD) Dam Neck Activity (DNA) cybersecurity programs for Shore-Based Training Systems. This position will provide compliance and auditor support for Risk Management Framework (RMF) Assessment & Authorization (A&A) processes supporting approximately 80 cloud and shore-based training systems across PMS339, DRPM SUBS (SEA07TR), and RRL sponsors." We need to preserve all that. We'll put in About the role paragraph(s). Might be long but okay. Now Responsibilities: list each bullet from "Key Job Responsibilities". We'll extract each sentence starting with a verb. List: - Oversee, evaluate, and support documentation, validation, and accreditation processes necessary to ensure Information Technology (IT) systems meet the organization's information assurance (IA) and security requirements. - Provide Auditor support for RMF packages and continuous monitoring purposes as needed in RMF Steps 0-6. - Provide security controls risk assessments and validations. - Assist in performing annual security reviews and annual testing of security controls. - Assess quality of security control implementation against requirements using NIST SP 800-53 and Navy cybersecurity guidelines. - Review and validate security artifacts including System Security Plans (SSP), Security Assessment Plans (SAP), Security Assessment Reports (SAR), and Plan of Action and Milestones (POA&M). - Support preparation and maintenance of RMF documentation including objective quality evidence (OQE) for security control validation. - Conduct reviews of Security Technical Implementation Guide (STIG) compliance results and Assured Compliance Assessment Solution (ACAS) vulnerability scan outputs; validate remediation activities. - Assist in tracking POA&M entries and ensuring vulnerabilities are properly documented, tracked, and resolved. - Support continuous monitoring activities by reviewing security control compliance status and identifying gaps or deficiencies. - Participate in coordination efforts with Information System Security Managers (ISSM), Technical Area Experts (TAE), Security Control Assessors (SCA), and Authorizing Officials (AO). - Review technical documentation including engineering change proposals, baseline descriptions, and configuration management artifacts for security compliance. - Assist in preparation of briefing materials for TAE, SCA, and AO checkpoint meetings. - Support development of security policies, procedures, and compliance reports. - Ensure appropriate treatment of risk, compliance, and monitoring assurance from internal and external perspectives. - Maintain knowledge of current Navy cybersecurity policies, instructions, and RMF guidance. - Utilize Enterprise Mission Assurance Support Service (eMASS) to track authorization packages and upload compliance artifacts. - Support cross-sponsor activities for PMS339, SUBS, and RRL programs as workload demands. - Attend DOW, Navy Authorizing Official (NAO), and PAE Maritime RMF meetings to stay current on RMF processes and procedures. - Utilize SIPRnet access 25-60% of the time depending on specific work assignments. - Expected travel up to 10-15% of time for approximately one week per trip to support authorization briefings or stakeholder coordination. Note: The last two might be more schedule but we can keep in responsibilities. Now Requirements: "What You Must Have" bullet points: - 2 years relevant experience with Bachelors in related field; 0 years experience with Masters in related field; or High School Diploma or equivalent and 6 years relevant experience. - Demonstrated foundational experience in Information Assurance compliance - Knowledge of RMF processes and A & A procedures