Senior Cybersecurity Assurance Officer

ERP International•Fort Meade, MD

28d•Onsite

About The Position

ERP International, LLC is seeking a Senior Cybersecurity Assurance Officer to support its DISA customer at Fort Meade, Maryland. The role provides cybersecurity leadership, technical oversight, and DISA Task Order management for mission-critical information systems and programs. The officer supports Risk Management Framework (RMF), Assessment and Authorization (A&A), continuous monitoring, security engineering, vulnerability management, and execution of assigned task orders. The position interfaces with Government stakeholders, program leadership, and technical teams to manage cybersecurity requirements, contractual deliverables, schedules, and performance objectives. It provides task direction, sets priorities, monitors execution, identifies risks, and coordinates issue resolution. The role also assesses and mitigates information-system security threats throughout the program lifecycle, validates security requirements, supports security architecture and engineering, and ensures compliance with applicable DoD, DISA, and federal cybersecurity policies and standards. The position is expected to be fully onsite at Fort Meade based on customer requirements, with potential for some remote work depending on business needs or requirements. Candidates must be U.S. citizens authorized to work in the United States and must possess at least an active DoD Secret clearance. The role requires a bachelor's degree in a relevant field or an equivalent combination of education, certifications, and relevant experience, as well as at least eight years leading cybersecurity efforts. Compensation is listed at $160,000–$190,000, with the final offer determined by factors including experience, qualifications, skill level, and location.

Requirements

Bachelor’s degree in Computer Science, Information Security, Information Technology, or equivalent; an equivalent combination of education, certifications, and relevant experience may be considered.
At least eight years leading cybersecurity efforts, including as an ISSO or in equivalent systems-security work, with knowledge of system functions, security policies, technical safeguards, and operational security measures.
Meet DoD 8570 IAT Level II certification requirements.
Experience using eMASS, including completion of required eMASS training.
Experience conducting vulnerability and risk assessments for system certification and accreditation.
Experience developing and maintaining System Security Plans, Risk Assessment Reports, Assessment and Authorization packages, and System Requirements Traceability Matrices.
Experience reviewing security documentation and evaluating security solutions for systems processing classified information.
Demonstrated ability to manage multiple technical assignments, competing priorities, schedules, and deliverables.
Strong understanding of the NIST Risk Management Framework, CNSSI 1253, and NIST SP 800-53 security controls.
Working knowledge of NIST SP 800-37, 800-53, 800-53A, and 800-160 Volumes 1 and 2.
Knowledge of DoD and DISA cybersecurity policies, security-authorization requirements, and continuous-monitoring processes.
Experience implementing or evaluating DISA STIG requirements and analyzing vulnerability-assessment findings.
Experience managing POA&Ms, remediation milestones, and cybersecurity risk documentation.
Ability to lead and coordinate technical task execution, establish priorities, track deliverables, and address performance challenges.
Understanding of Government task-order execution, contractual deliverables, reporting requirements, and stakeholder coordination.
Must possess an active DoD Secret clearance at minimum.
Must be authorized to work in the United States; U.S. citizenship is required.

Nice To Haves

Direct experience supporting DISA cybersecurity programs and managing DISA Task Orders.
Experience coordinating multiple concurrent task orders or cybersecurity workstreams in a DoD environment.
Active DoD Top Secret clearance.
Experience securing DoD cloud and containerized environments, including Azure or AWS Impact Level 5 or 6, Kubernetes, Linux, web applications, APIs, database services, inherited controls, shared-responsibility models, and cloud-specific authorization evidence.
Experience supporting cybersecurity process improvements, security-compliance initiatives, and risk-management activities.

Responsibilities

Integrate the NIST Risk Management Framework throughout information-system development and operational lifecycles.
Identify, document, and allocate cybersecurity requirements within system designs and architectures.
Lead and coordinate Assessment and Authorization activities, including developing and maintaining authorization packages and supporting documentation.
Develop, review, and maintain security authorization artifacts in eMASS.
Review and update System Security Plans, risk assessments, security-control implementation statements, and supporting security documentation.
Apply knowledge of DISA Security Technical Implementation Guides and their use in system security compliance.
Review vulnerability and compliance assessment results, validate proposed mitigations, and coordinate remediation of security findings.
Manage and monitor Plans of Action and Milestones, including remediation schedules, risk documentation, and corrective actions.
Support security-requirements verification, compliance testing, security-control assessments, and continuous monitoring.
Maintain and enforce applicable information-security policies, standards, procedures, and guidelines.
Lead planning, coordination, execution, and monitoring of assigned DISA Task Orders to deliver cybersecurity requirements and mission objectives.
Assign, prioritize, and track technical work across cybersecurity personnel and supporting teams, ensuring accountability for execution and deliverables.
Serve as a primary operational point of contact for task-order execution, coordinating with DISA Government stakeholders, program management, and technical teams.
Manage task-order schedules, milestones, dependencies, deliverables, and performance metrics.
Monitor task-order progress, identify execution risks, and coordinate corrective action for delays, resource constraints, and emerging requirements.
Establish and maintain standardized task-order tracking, reporting, and documentation processes.
Provide technical leadership and guidance to cybersecurity personnel supporting DISA programs and task orders.
Coordinate with Information System Security Managers, system owners, engineers, developers, program managers, and Government stakeholders on cybersecurity requirements and operational priorities.
Mentor junior cybersecurity personnel and promote consistent implementation of security policies, procedures, and best practices.
Identify opportunities to improve cybersecurity processes, documentation quality, task execution, and program efficiency.
Communicate technical findings, cybersecurity risks, program impacts, and recommended corrective actions to technical and nontechnical stakeholders.
Support management reviews, technical discussions, compliance assessments, and Government reporting requirements.