Cybersecurity Certification And Accreditation Analyst

Nationwide IT Services

5d•Remote

About The Position

Nationwide IT Services (NIS) is seeking a Cybersecurity Subject Matter Expert (SME) for a potential opportunity to support the Authorization (ATO) of Department of Defense (DoD) information systems. The ideal candidate will possess deep expertise in the Risk Management Framework (RMF), NIST security controls, and DoD cybersecurity policies, and will provide advisory and execution support for systems undergoing authorization. This is a 100% remote opportunity.

Requirements

Minimum of five (5) years of relevant Certification & Accreditation (C&A) or RMF experience.
Demonstrated experience with: Risk Management Framework (RMF) NIST C&A processes DoD cybersecurity environments
Proven experience assessing security controls and conducting authorization reviews for large, complex organizations.
Active DoD Secret clearance.
Must be eligible for IT-I and IT-II designations.
Certification meeting DoD 8570.01 IAT Level II requirements (for CERT personnel), such as: CompTIA Security+ CE CISSP CEH

Nice To Haves

CNDSP–Analyst and/or Certified Ethical Hacker (CEH) certification preferred.
Computing Environment Certifications (One or More) CompTIA Security+ CE CISSP Microsoft certifications including: MCSA / MCSE MCITP (EDST, EDA, SA, EA) MCDST MCA / MCM Microsoft Windows Server (Directory Services) Windows 10 AC & PHY SEC

Responsibilities

Serve as a cybersecurity Subject Matter Expert (SME) for the authorization of information systems and associated cybersecurity policies, procedures, and processes.
Apply in-depth knowledge of the DoD Risk Management Framework (RMF) and Authorization to Operate (ATO) processes.
Perform cybersecurity authorization activities or act as an SME supporting systems undergoing authorization.
Assess and evaluate security controls in accordance with NIST SP 800-53.
Analyze vulnerabilities, determine severity levels, and assess potential impacts on current or future system authorizations.
Support authorization efforts for large, complex IT environments consisting of multiple enclaves, AIS applications, and outsourced IT services (e.g., DLA-scale environments).
Brief senior leadership on authorization status, risks, findings, and recommendations.
Ensure compliance with applicable DoD cybersecurity policies and standards.