Information Assurance Analyst, SME

Federal IT Consulting (FEDITC) • Indianapolis, IN

1d • Onsite

About The Position

FEDITC, LLC is seeking an Information Assurance Analyst, SME to lead cybersecurity compliance and Risk Management Framework (RMF) accreditation operations for the DFAS Common Computing Environment (CCE). The position provides subject matter expertise in Assessment & Authorization (A&A), FISMA compliance, and audit support to help ensure the CCE maintains continuous Authority to Operate (ATO). On-site presence is required at a designated location.

The role leads and supervises Information Assurance staff and directs RMF compliance, accreditation, continuous monitoring, audit support, and documentation activities across cloud and on-premises mission systems. The analyst coordinates with DFAS stakeholders and security officials to keep authorization packages current and meet required compliance targets.

Candidates must be United States citizens with an active Top Secret/SCI DoD security clearance. A BA/BS degree, specified advanced certification, applicable computing environment certification for privileged access roles, and mandatory DoD 8140 certifications are also stated.

Requirements

• At least 10 years of information assurance experience in DoD or Federal environments, with increasing responsibility.
• Expert knowledge of DoD RMF (DoDI 8510.01), NIST SP 800-37, and NIST SP 800-53 security controls.
• Demonstrated experience managing A&A packages in eMASS.
• Experience supporting FISMA compliance programs and federal cybersecurity audits, including FISCAM and SSAE.
• Strong knowledge of continuous monitoring, vulnerability management, and POA&M processes.
• Experience with security control assessment and validation methodologies.
• Understanding of DoD IT security policies, DISA STIGs, and compliance frameworks.
• Experience coordinating with Authorizing Officials, ISSMs, and security validators.
• Proven ability to lead compliance teams and manage multiple concurrent authorization packages.
• Ability to support COOP exercises and emergency operations.
• BA/BS degree.
• 722 ISSM Advanced certification, such as CISSP, CISM, or equivalent.
• Computing Environment (CE) certification required for privileged access roles.
• Must obtain and maintain all mandatory DoD 8140 certifications.
• United States citizenship and an active Top Secret/SCI DoD security clearance are required; candidates must also pass a background check.
• Must maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s), as requested by FEDITC or required by its clients, customers, or prime contractors.
• On-site presence at a designated location is required.

Nice To Haves

• CAP, CASP+, or equivalent RMF certification.
• Experience with FISCAM audit support and IT general controls testing.
• Experience with Xacta, Archer, or a similar GRC platform.
• Experience with classified system (JWICS) accreditation.
• DFAS or DoD financial system RMF/IA experience.
• Experience achieving two-year or extended ATO packages.

Responsibilities

• Lead and supervise Information Assurance staff providing RMF compliance and accreditation support for the DFAS CCE.
• Direct Assessment & Authorization activities under the DoD RMF using eMASS.
• Manage FISMA compliance, including annual control testing, documentation, and reporting.
• Oversee preparation and maintenance of RMF artifacts, including Security Plans, Control Validations, POA&Ms, and Acceptance of Risk documentation.
• Coordinate support for FISCAM audits, DFAS internal audits, and SSAE attestations.
• Ensure ATO/ATC packages remain current and compliant for CCE mission systems in cloud and on-premises environments.
• Direct continuous monitoring activities, including vulnerability scan review, patch management compliance, and IAVA tracking.
• Lead POA&M management, root cause analysis, and remediation coordination.
• Coordinate with the DFAS CIO validator and ISSM on RMF actions and compliance requirements.
• Develop and maintain IA documentation, including policies, procedures, and audit evidence.
• Maintain 100% RMF certification and achieve 95% or higher FISCAM control pass rates.
• Support COOP exercises and emergency operations.
• Maintain applicable security clearances at the level required by the client and/or applicable certifications as requested or required.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior