Navy Qualified Validator III (Secret Clearance Required)

RedTrace Technologies Inc•Philadelphia, PA

5d•Hybrid

About The Position

The Navy Qualified Validator III will provide Risk Management Framework (RMF) Package Validation and Assessment support to the Naval Surface Warfare Center Philadelphia Division (NSWCPD). Work will be performed onsite at NSWCPD and Contractor facility. We are seeking a Navy Qualified Validator that is registered and listed on the official list of Navy Qualified Validators to carry out the following duties and responsibilities: Perform and support activities of Validators of Navy (RMF) Risk Management Framework packages. Ensure separation of duties between the System ISSM/ISSE and NQV. Contractor shall follow roles and responsibilities listed in NAVSEA03 Risk Management Framework Business Rules. Prepare the Security Assessment Plan (SAP) with input from the system’s ISSE and ISSM. The SAP is to be submitted and approved by the SCA. Perform as an independent third party who assesses and validates that the system has [or has not] implemented the approved security control baseline. On-site validation may be required for conducting required testing. The Validator acts as a trusted agent to the (SCA) Security Control Assessor and SCA Liaison. Utilize the Security Assessment Report (SAR) to document the residual risk of the non-compliant security controls remaining after the risk assessment work is complete; documentation of the residual risk shall be in the Risk Assessment Report (RAR) in accordance (NAVSEAINST 9400.2) instruction. Develop the SAR Executive Summary and Functional Security Controls Assessor (FSCA) Appendix and brief to the required PM/ISSM. Write technical documentation such as user manuals, reports, documentation, policies, presentations, Plan of Action and Milestones (POA&Ms), risk assessments, proposals, outlines, and summaries in support of both ashore and afloat systems across multiple platforms. Support development of technical documents across multiple platforms including configuration management, milestone, issue tracking, web site content management and RMF documentation.

Requirements

Five (5) years of professional experience in the management of Information Assurance Technical (IAT), certification agents, and system engineers on compliance requirements to achieve certification and accreditation in accordance with the DoD RMF program and DON Chief Information Officer (CIO) IA Policy for Platform Information Technology (PIT) Systems
Bachelor’s degree in computer from an accredited college or university.
IAM II certified.
Navy Qualified Validator (NQV) Level III certification
Active Secret clearance
POSITION REQUIRES US CITIZENSHIP

Responsibilities

Perform and support activities of Validators of Navy (RMF) Risk Management Framework packages.
Ensure separation of duties between the System ISSM/ISSE and NQV.
Prepare the Security Assessment Plan (SAP) with input from the system’s ISSE and ISSM.
Perform as an independent third party who assesses and validates that the system has [or has not] implemented the approved security control baseline.
Utilize the Security Assessment Report (SAR) to document the residual risk of the non-compliant security controls remaining after the risk assessment work is complete
Develop the SAR Executive Summary and Functional Security Controls Assessor (FSCA) Appendix and brief to the required PM/ISSM.
Write technical documentation such as user manuals, reports, documentation, policies, presentations, Plan of Action and Milestones (POA&Ms), risk assessments, proposals, outlines, and summaries in support of both ashore and afloat systems across multiple platforms.
Support development of technical documents across multiple platforms including configuration management, milestone, issue tracking, web site content management and RMF documentation.