Cybersecurity Assess and Auth. Specialist

INFORMATION TECHNOLOGY STRATEGIES INC•Philadelphia, PA

27d

About The Position

Information Technology Strategies, Inc. is a government IT solutions provider servicing commercial and government initiative in various parts of the United States. We are currently seeking a Cybersecurity Assessment and Authorization Specialist to work for our company. The client agency is the Defense Logistics Agency. This role serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. The specialist executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process. This position requires an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA, which includes a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications, and outsourced IT processes. The role involves determining the residual risk of an identified vulnerability (e.g., non-compliant security control) and its possible ramifications on the system’s current or future authorization. Additionally, the specialist will brief senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.

Requirements

Must possess IT-II security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC). (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies)
Five (5) years of relevant C&A experience.
Must have an IAM Level III certification.
Must have Risk Management Framework (RMF) and NIST C&A experience.
Must have DOD cybersecurity experience.
Experience in assessing security controls and conducting authorization reviews for large, complex organizations.
Experienced in the general tenets supporting the overall DOD implementation of its authorization process, to include supporting cybersecurity policy, procedures, and processes.
Knowledgeable in the cybersecurity of emerging technology areas such as Cloud and Industrial Control Systems (ICSs), warehouse execution systems and Operational Technology (OT) infrastructures.
Excellent oral and written communication skills.

Nice To Haves

Possess an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes.

Responsibilities

Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures.
Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process.
Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization.
Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.