ConMon Validator
About The Position
The ConMon Validator supports a high-profile national security customer in strengthening its cybersecurity posture and developing and maturing an enterprise Information Security Continuous Monitoring (ISCM) program. The role assesses the effectiveness of security controls, improves risk visibility, and provides decision-makers with information to support risk-based decisions about mission-critical systems. It works with cybersecurity leaders, assessors, ISSOs, and executive stakeholders as part of a team providing Systems Engineering and Technical Assistance (SETA) support across cybersecurity disciplines, including RMF, cyber defense operations, assessment and authorization, vulnerability management, FISMA compliance and reporting, information assurance governance, and security metrics and reporting. The validator serves as a cybersecurity advisor to programs, helping demonstrate compliance, improve reporting accuracy, and strengthen continuous monitoring. The position reviews evidence and documentation, advises on process and tool improvements, supports audits and assessments, and develops metrics and reporting for authorizing officials and senior leaders. It also mentors ISSOs and contributes to enterprise cybersecurity governance, compliance, and operational resilience.
Requirements
- Active Top Secret clearance with SCI eligibility and a favorable Polygraph.
- Current DoD 8570 IAT or IAM certification.
- Experience implementing the Risk Management Framework (RMF) and NIST 800-53 security controls.
- Experience developing, reviewing, and maintaining cybersecurity authorization and accreditation documentation.
- Experience serving in one or more of these roles: Information Systems Security Officer (ISSO), Information Systems Security Manager (ISSM), Security Control Assessor (SCA), or Delegated Authorizing Official Representative (DAOR).
- Strong analytical and problem-solving skills.
- Exceptional attention to detail and organizational ability.
- Excellent written and verbal communication skills.
- Ability to work in a collaborative, team-oriented environment.
- Proficiency with Microsoft Office Suite, including Outlook, Excel, PowerPoint, and SharePoint.
- Ability to work independently and manage competing priorities with minimal oversight.
Nice To Haves
- Direct experience supporting an Information Security Continuous Monitoring (ISCM) program.
- Bachelor's degree in a STEM discipline or an advanced cybersecurity certification such as CISSP, CASP+, or equivalent.
- Experience supporting Intelligence Community (IC) or Department of Defense (DoD) cybersecurity initiatives.
- Experience briefing senior government leaders and executive stakeholders.
- Familiarity with cybersecurity governance, acquisition programs, and project management practices.
- Hands-on experience with RSA Archer, ServiceNow, or Xacta.
- Cloud security experience and related certifications.
- Knowledge of security metrics development, compliance reporting, and enterprise risk management concepts.
Responsibilities
- Support the development, implementation, and maturation of the customer's enterprise Continuous Monitoring (ConMon) program.
- Validate security control evidence and documentation for effectiveness, completeness, and compliance with organizational requirements.
- Partner with ISCM leadership to identify process improvements and operational efficiencies.
- Review and assess ConMon Bodies of Evidence (BOEs) submitted through enterprise cybersecurity tools.
- Coach and mentor Information System Security Officers (ISSOs) on creating meaningful and defensible security evidence.
- Improve the quality, consistency, and fidelity of security documentation across multiple programs.
- Collaborate with Security Control Assessors (SCAs), FISMA teams, and Inspector General (IG) stakeholders in audits, assessments, and compliance reviews.
- Develop cybersecurity metrics and reporting to help Authorizing Officials (AOs) and senior leaders make informed risk decisions.
- Analyze trends, identify gaps, and recommend improvements to enterprise reporting and monitoring capabilities.
- Evaluate and recommend enhancements to Enterprise Security Services (ESS) tools and processes.
- Contribute to enterprise-wide initiatives that strengthen cybersecurity governance, compliance, and operational resilience.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
