Assessment and Authorization Specialist

Swift•Dulles, VA

4h•Onsite

About The Position

The Swift Group is a privately held, mission-driven and employee-focused services and solutions company headquartered in Reston, VA. Our capabilities include Software Development, Engineering & IT, Data Science, Cyber Enablement, Logistics, and Training. Founded in 2019, Swift supports Civilian, Defense, and Intelligence Community customers across the country and around the globe. Swift is looking for an Assessment and Authorization (A&A) Specialist to support a dynamic program in Dulles, VA. In this role, you will guide information systems through the Risk Management Framework (RMF) lifecycle, manage security documentation, and serve as a trusted advisor to both technical teams and senior leadership. You will work within a collaborative, mission-focused environment where your expertise in INFOSEC policy, cyber risk, and stakeholder communication directly supports critical security programs.

Requirements

Bachelor’s degree in Management Information Systems, Information Assurance, Computer Engineering, or a closely related IT/cybersecurity discipline, or equivalent work experience
10+ years of A&A experience
Experience applying the Risk Management Framework (RMF) methodology in a professional environment
Experience managing document repositories and databases
Experience with process tracking and document control software
Strong writing, communications, and briefing skills with experience presenting to varied audiences
Experience providing technical guidance and oversight to both technical practitioners and non-technical, senior-level personnel
Proven ability to organize, plan, and prioritize multiple tasks to deliver work on schedule
Solid working knowledge of INFOSEC policies, regulations, and applicable security guidance
Working knowledge of cyber risks, including malware, zero-day attacks, and denial-of-service attacks, as well as the associated mitigations across computer and network devices
Excellent customer service skills and the ability to collaborate with customers at all levels
US citizenship and an active TS/SCI with Polygraph security clearance required

Nice To Haves

Demonstrated experience with the Customer’s A&A process and associated documentation requirements
Certified Information Systems Security Professional (CISSP) certification
Knowledge of the Customer’s standard project cycle, including key phases and governance milestones
Demonstrated experience with the Customer’s diverse IT infrastructure, including operating systems, major application systems, and network architecture

Responsibilities

Lead and execute A&A activities in accordance with the Risk Management Framework (RMF) methodology, ensuring systems meet all applicable security requirements for authorization
Manage and maintain document repositories and security databases, ensuring accuracy, completeness, and version control of all A&A artifacts
Utilize process tracking and document control software to monitor authorization milestones, track findings, and maintain auditable records of A&A activities
Develop, review, and update security documentation including System Security Plans (SSPs), Risk Assessments, and Plans of Action and Milestones (POA&Ms)
Deliver clear written communications and briefings on cybersecurity posture, risk findings, and authorization status to both technical teams and senior non-technical leadership
Provide technical guidance and oversight across organizational levels, translating complex cybersecurity concepts into actionable recommendations for diverse audiences
Organize, plan, and prioritize multiple concurrent tasks and deliverables to ensure on-schedule completion of all A&A milestones and program commitments
Apply in-depth knowledge of INFOSEC policies, regulations, and guidance to ensure compliant and defensible security practices
Assess and advise on cyber risks including malware, zero-day vulnerabilities, and denial-of-service threats, along with associated mitigations across computer and network environments
Build and maintain strong working relationships with customers at all organizational levels, delivering excellent service and fostering a collaborative approach to security challenges