Information Assurance Specialist - III (Information Security Analyst)

Barbaricum•Indianapolis, IN

About The Position

Barbaricum is seeking an experienced Information Assurance Specialist III (Information Security Analyst) to support cybersecurity compliance, risk management, and authorization activities for Department of Defense (DoD) systems. The selected candidate will assess security controls, support Security Assessment and Authorization (SA&A) efforts, and develop accreditation documentation to ensure compliance with federal and DoD cybersecurity requirements. The Information Assurance Specialist will work closely with system owners, engineers, and cybersecurity teams to evaluate system security, support continuous monitoring activities, and maintain compliance with the Risk Management Framework (RMF), NIST standards, and applicable government regulations.

Requirements

Active DoD Secret Clearance
Bachelor's degree in related field.
Must meet DoDM 8140.03 IAT III/IAM II requirements.
Minimum 10yr experience in network operations and information security.
Demonstrated experience assessing security controls based on cybersecurity principles and tenets.(e.g., NIST SP 800-53, Cybersecurity Framework, etc.).
In-depth understanding of relevance of NIST Security Controls and Control Implementation methodologies to the SA&SA process.
Relevant DOD, DHS or .gov Cyber Security Information Assurance focused experience with specific current hands-on researching, writing, and submitting complete A&A documentation packages for new system authorizations.

Responsibilities

Assess, implement, and validate cybersecurity controls in accordance with NIST SP 800-53, the NIST Cybersecurity Framework, and applicable DoD cybersecurity requirements.
Support the Security Assessment and Authorization (SA&A) process by evaluating security controls, identifying risks, and recommending mitigation strategies.
Develop, review, and maintain Assessment and Authorization (A&A) documentation packages to support system accreditation and authorization efforts.
Conduct security assessments, vulnerability analyses, and compliance reviews to ensure systems meet federal and DoD cybersecurity standards.
Collaborate with system owners, engineers, and cybersecurity teams to implement security controls and maintain a strong security posture across enterprise environments.
Support continuous monitoring activities, including risk assessments, control validation, remediation tracking, and reporting.
Provide cybersecurity guidance and recommendations related to information assurance, risk management, and regulatory compliance.
Prepare technical reports, security documentation, and executive briefings to support authorization decisions and stakeholder requirements.
Ensure compliance with Risk Management Framework (RMF), DoD policies, and applicable government cybersecurity regulations.
Serve as a subject matter expert on information assurance, cybersecurity controls, accreditation processes, and security compliance initiatives.