Cybersecurity Assessment Expert
About The Position
Information Technology Strategies, Inc. is a government IT solutions provider servicing commercial and government initiative in various parts of the United States. We are currently seeking a Cybersecurity Assessment and Authorization Expert to work for our company. Summary: Client Agency isDefense Logistics Agency Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization. Possessan understanding of how the security controlsidentifiedin the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes. Determinesthe applicable severity value for an identified vulnerability (e.g., non-compliant security control) anddeterminesthe possible ramifications on the system’s current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.
Requirements
- Must possess IT-II security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC).(Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies)
- Must haveDLA CERT Analyst will maintain CSSPAnalyst certification:CySA+, CFR(CyberSecFirst Responder), or CEH(Certified Ethical Hacker) certifications.
- Five (5) years of relevant Risk Management Framework (RMF) and NIST A&A experience.
- Must haveDOD cybersecurity experience
- Experience in assessing security controls and conducting authorization reviews for large, complex organizations.
- Experienced in the general tenets supporting the overall DOD implementation of its authorization process, to include supporting cybersecurity policy, procedures, and processes.
- Knowledgeable in the cybersecurity of emerging technology areas such as Cloud and Industrial Control Systems (ICSs), warehouse executionsystemsand Operational Technology (OT) infrastructures.
- Excellent oral and written communication skills.
Benefits
- Four Medical/Vision options including an HSA plan
- Dental and Orthodontia plan
- Vision Materials plan
- Paid Life, Short-Term Disability, and Long-Term Disability
- 401K Retirement Program with company contribution
- Paid Vacation, Holidays, Sick Leave, Floating Holidays, Bereavement Leave
- Semi-monthly pay cycle
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
