Cybersecurity C&A Analyst (OT)

Amyx, Inc.

About The Position

Amyx, Inc. is seeking to hire a Cybersecurity C&A Analyst. The candidate will serve as a cybersecurity Subject Matter Expert (SME) with regards to Authorization of information systems and all associated cybersecurity policies and procedures.

Requirements

Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DoD cybersecurity experience
DoD Secret Clearance
Must be eligible for IT-II
Relevant certification meeting DOD 8570.01 IAM level III
Experience in assessing security controls and conducting authorization reviews for large, complex organizations.
Experience with reviewing plans, policies, procedures and providing recommendations for implementation and/or modification.

Nice To Haves

Operational Technology experience
NIST 800-82 and ISA/IEC 62443 understanding
Communication capability with both small and large teams

Responsibilities

Fully versed in the general tenets supporting the overall DoD implementation of RMF authorization process, including supporting cybersecurity policy, procedures, and processes.
Performs a DoD cybersecurity processes serving as a SME for information system undergoing authorization.
Possess an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing Operational Technology (OT), Facility Related Control Systems (FRCS) and/or Information Technology (IT) systems.
Perform risk assessments for DLA systems based on DLA FRCS Risk Assessment process.
Provide FRCS/OT/RMF guidance to system PMs, vendors and supporting personnel.
Required to brief senior management on the progress or results of assigned risk assessments.
Employ DLA RMF tools to evaluate cybersecurity risk including eMASS, STIG Viewer, ForeScout, and ACAS.
Must have the ability to communicate accurate information