Senior Cybersecurity Assurance Officer

ERP International•Fort Meade, MD

29d•$160,000 - $190,000•Onsite

About The Position

ERP International, LLC is seeking a Senior Cybersecurity Assurance Officer to support its DISA customer at Fort Meade, Maryland. The role provides cybersecurity leadership, technical oversight, and DISA Task Order management for mission-critical information systems and programs. It supports the Risk Management Framework (RMF), Assessment and Authorization (A&A), continuous monitoring, security engineering, vulnerability management, and execution of assigned task orders. The officer serves as a key interface among Government stakeholders, program leadership, and technical teams. The role manages cybersecurity requirements, contractual deliverables, schedules, and performance objectives; directs task execution; establishes priorities; monitors progress; identifies risks; and coordinates issue resolution. It also assesses and mitigates information system security threats across the program lifecycle, validates security requirements, supports security architecture and engineering, and ensures compliance with applicable DoD, DISA, and federal cybersecurity policies and standards. The position is expected to be fully onsite at Fort Meade based on customer requirements, with potential for some remote work depending on business needs or requirements. Applicants must have an active DoD Secret clearance, be authorized to work in the United States, and be U.S. citizens. The listed pay range is $160,000–$190,000.

Requirements

Bachelor’s degree in Computer Science, Information Security, Information Technology, or equivalent; an equivalent combination of education, certifications, and relevant experience may be considered.
At least eight years of experience leading cybersecurity efforts, including as an ISSO or in equivalent systems security work.
Knowledge of system functions, security policies, technical safeguards, and operational security measures.
Must meet DoD 8570 IAT Level II certification requirements.
Experience using eMASS, including completion of required eMASS training.
Experience conducting vulnerability and risk assessments in support of system certification and accreditation.
Experience developing and maintaining SSPs, Risk Assessment Reports, A&A packages, and System Requirements Traceability Matrices.
Experience reviewing security documentation and evaluating security solutions for systems processing classified information.
Ability to manage multiple technical assignments, competing priorities, schedules, and deliverables.
Strong understanding of the NIST RMF, CNSSI 1253, and NIST SP 800-53 security controls.
Working knowledge of NIST SP 800-37, 800-53, 800-53A, and 800-160 Volumes 1 and 2.
Knowledge of DoD and DISA cybersecurity policies, security authorization requirements, and continuous monitoring processes.
Experience implementing or evaluating DISA STIG requirements and analyzing vulnerability assessment findings.
Experience managing POA&Ms, remediation milestones, and cybersecurity risk documentation.
Ability to lead and coordinate technical task execution, establish priorities, track deliverables, and address performance challenges.
Understanding of Government task order execution, contractual deliverables, reporting requirements, and stakeholder coordination.
Must possess at least an active DoD Secret clearance.
Must be authorized to work in the U.S.; U.S. citizenship is required.

Nice To Haves

Direct experience supporting DISA cybersecurity programs and managing DISA Task Orders.
Experience coordinating multiple concurrent task orders or cybersecurity workstreams in a DoD environment.
Active DoD Top Secret clearance.
Experience securing DoD cloud and containerized environments, including Azure or AWS Impact Level 5 or 6, Kubernetes, Linux, web applications, APIs, database services, inherited controls, shared-responsibility models, and cloud-specific authorization evidence.
Experience supporting cybersecurity process improvements, security compliance initiatives, and risk management activities.

Responsibilities

Integrate the NIST Risk Management Framework throughout information system development and operational lifecycles.
Identify, document, and allocate cybersecurity requirements within system designs and architectures.
Lead and coordinate Assessment and Authorization activities, including developing and maintaining authorization packages and supporting documentation.
Develop, review, and maintain security authorization artifacts in eMASS.
Review and update System Security Plans, risk assessments, security control implementation statements, and related security documentation.
Apply DISA Security Technical Implementation Guides and review vulnerability and compliance assessment results.
Validate proposed mitigations and coordinate remediation of security findings.
Manage and monitor Plans of Action and Milestones, remediation schedules, risk documentation, and corrective actions.
Support security requirements verification, compliance testing, security control assessments, and continuous monitoring.
Maintain and enforce applicable information security policies, standards, procedures, and guidelines.
Plan, coordinate, execute, and monitor assigned DISA Task Orders to deliver cybersecurity requirements and meet mission objectives.
Assign, prioritize, and track technical activities across cybersecurity personnel and supporting teams, ensuring accountability for execution and deliverables.
Serve as a primary operational point of contact for task order execution, coordinating with DISA Government stakeholders, program management, and technical teams.
Manage task order schedules, milestones, dependencies, deliverables, and performance metrics.
Identify task execution risks and coordinate corrective actions for schedule delays, resource constraints, and emerging requirements.
Establish and maintain standardized task order tracking, reporting, and documentation processes.
Provide technical leadership and guidance to cybersecurity personnel supporting DISA programs and task orders.
Coordinate with ISSMs, system owners, engineers, developers, program managers, and Government stakeholders on cybersecurity requirements and operational priorities.
Mentor junior cybersecurity personnel and promote consistent implementation of security policies, procedures, and best practices.
Identify opportunities to improve cybersecurity processes, documentation quality, task execution, and program efficiency.
Communicate technical findings, cybersecurity risks, program impacts, and recommended corrective actions to technical and nontechnical stakeholders.
Support management reviews, technical discussions, compliance assessments, and Government reporting requirements.