Information Assurance Compliance Analyst - 30426

HII's Mission Technologies division•Virginia Beach, VA

1d•$74,074 - $105,820•Hybrid

About The Position

This opportunity resides with Global Security (GS). Mission Technologies’ Global Security (GS) group comprises live, virtual, constructive (LVC) solutions; fleet sustainment; nuclear and environmental; and Australia business. As a trusted partner to our military customers, HII designs, develops and operates the largest LVC enterprise that prepares warfighters for cross-domain battle. With advanced technologies to enable mission readiness, HII understands that preparation requires full coordination—not readiness in piece-parts. For more than 40 years, the U.S. Navy has entrusted HII to maintain and modernize the vast majority of its fleet. With a holistic approach to life-cycle maritime defense systems—from small watercraft to submarines, surface combatants and aircraft carriers—HII ensures a high state of readiness. HII supports the Department of Energy’s national security mission through the management and operation of its sites, as well as the safe cleanup of legacy waste across the country. HII meets clients’ toughest nuclear and environmental challenges. Leadership at HII is a mindset, not a title. Through our Leadership Capability Framework, we define how every employee grows, leads, and contributes—regardless of role. It sets the standard for how you can develop yourself and what you can expect from leaders across our organization. We look for candidates who want to grow in alignment with these capabilities: Know & Grow Your People – Commit to learning and supporting team success. Build Relationships – Communicate openly, collaborate well, and build trust. Take Ownership – Deliver on commitments and take pride in your work. Customer First – Focus on the mission and those we serve. Shape the Future – Bring ideas, curiosity, and continuous improvement. Act with Urgency – Take initiative and follow through with purpose. These capabilities guide how all employees contribute to our shared success across Mission Technologies. HII's Mission Technologies division is currently seeking a Information Assurance Compliance Analyst to support Naval Surface Warfare Center Dahlgren Division (NSWCDD) Dam Neck Activity (DNA) cybersecurity programs for Shore-Based Training Systems. This position will provide compliance and auditor support for Risk Management Framework (RMF) Assessment & Authorization (A&A) processes supporting approximately 80 cloud and shore-based training systems across PMS339, DRPM SUBS (SEA07TR), and RRL sponsors.

Requirements

2 years relevant experience with Bachelors in related field; 0 years experience with Masters in related field; or High School Diploma or equivalent and 6 years relevant experience.
Demonstrated foundational experience in Information Assurance compliance
Knowledge of RMF processes and A & A procedures.
Experience working with Information Assurance tools such as eMASS and ACAS.
DoD 8140 (formerly 8570) IAT Level II certification such as CCNA, CAP, Security+ CE, or ENSA required.
Current or active DoD Secret clearance.
Ability to work onsite at Dam Neck, Virginia Beach, VA hybrid schedule. Remote/telework is at the discretion of the government.

Nice To Haves

Experience supporting Navy shore-based training systems or cloud-based environments.
Knowledge of Navy cybersecurity policies, Federal Information Security Modernization Act (FISMA) reporting, and continuous monitoring requirements.
Familiarity with NIST SP 800-53 security controls and assessment procedures.
Experience with STIG compliance validation and vulnerability remediation tracking.
Strong analytical and documentation skills.
U.S. Navy background with information assurance or cybersecurity experience.
Ability to communicate effectively with technical and non-technical audiences.
Attention to detail and commitment to compliance accuracy.

Responsibilities

Oversee, evaluate, and support documentation, validation, and accreditation processes necessary to ensure Information Technology (IT) systems meet the organization's information assurance (IA) and security requirements.
Provide Auditor support for RMF packages and continuous monitoring purposes as needed in RMF Steps 0-6. Provide security controls risk assessments and validations.
Assist in performing annual security reviews and annual testing of security controls.
Assess quality of security control implementation against requirements using NIST SP 800-53 and Navy cybersecurity guidelines.
Review and validate security artifacts including System Security Plans (SSP), Security Assessment Plans (SAP), Security Assessment Reports (SAR), and Plan of Action and Milestones (POA&M).
Support preparation and maintenance of RMF documentation including objective quality evidence (OQE) for security control validation.
Conduct reviews of Security Technical Implementation Guide (STIG) compliance results and Assured Compliance Assessment Solution (ACAS) vulnerability scan outputs; validate remediation activities.
Assist in tracking POA&M entries and ensuring vulnerabilities are properly documented, tracked, and resolved.
Support continuous monitoring activities by reviewing security control compliance status and identifying gaps or deficiencies.
Participate in coordination efforts with Information System Security Managers (ISSM), Technical Area Experts (TAE), Security Control Assessors (SCA), and Authorizing Officials (AO).
Review technical documentation including engineering change proposals, baseline descriptions, and configuration management artifacts for security compliance.
Assist in preparation of briefing materials for TAE, SCA, and AO checkpoint meetings.
Support development of security policies, procedures, and compliance reports.
Ensure appropriate treatment of risk, compliance, and monitoring assurance from internal and external perspectives.
Maintain knowledge of current Navy cybersecurity policies, instructions, and RMF guidance.
Utilize Enterprise Mission Assurance Support Service (eMASS) to track authorization packages and upload compliance artifacts.
Support cross-sponsor activities for PMS339, SUBS, and RRL programs as workload demands.
Attend DOW, Navy Authorizing Official (NAO), and PAE Maritime RMF meetings to stay current on RMF processes and procedures.
Utilize SIPRnet access 25-60% of the time depending on specific work assignments.
Expected travel up to 10-15% of time for approximately one week per trip to support authorization briefings or stakeholder coordination.