Senior Cybersecurity Internal Control Administrator

Integral•Radford, VA

11d

About The Position

The Senior Cybersecurity Internal Controls Administrator provides comprehensive cybersecurity and Risk Management Framework (RMF) support for the U.S. Army Product Lead Acquisition, Logistics, and Technology Enterprise Systems and Services (PL ALTESS), in accordance with DoDI 8500.01, DoDI 8510.01, and AR 25-2. The position supports Enterprise eMASS and RMF services, security-control compliance, system validation, remediation, and related Army cybersecurity records and reviews.

Requirements

Cybersecurity certification, such as CISSP.
10 or more years of experience in cybersecurity and RMF-related areas.
Extensive experience with Enterprise eMASS and RMF services.
Proficiency developing RMF packages and maintaining asset lists and categorizations.
Ability to schedule and coordinate system validation reviews.
Experience generating artifacts to support control compliance.
Knowledge of ACAS and STIG reports and experience coordinating remediation efforts.
Experience creating, tracking, and maintaining POA&Ms.
Ability to perform annual security reviews.
Participation in COOP and Incident Response testing.
Ability to maintain Army PPSM and Circuit Registry records.
Participation in SW Assurance reviews and documenting items via eMASS POA&M.
Experience with security compliance and control documentation.
Active DoD Secret Security Clearance.

Nice To Haves

Bachelor's degree in Computer Science or equivalent years of experience.
Familiarity with DoDI 8500.01, DoDI 8510.01, and AR 25-2.
Strong analytical and problem-solving skills.
Excellent communication and coordination skills.
Experience with Army enterprise monitoring tools and practices.
Knowledge of security regulations and industry best practices.
Ability to work effectively in a team environment and collaborate with various stakeholders.
Experience with incident response activities.
Understanding of Continuity of Operations Plans and Communication Plans.

Responsibilities

Provide Enterprise eMASS and RMF services, including developing RMF packages, maintaining asset lists and categorizations, and scheduling and coordinating system validation reviews.
Generate artifacts to support control compliance; review ACAS and STIG reports; and coordinate remediation efforts.
Create, track, and maintain Plan of Action Milestones (POA&M).
Perform annual security reviews.
Participate in Continuity of Operations (COOP) and Incident Response testing.
Maintain Army PPSM and Circuit Registry records.
Participate in Software Assurance (SW Assurance) reviews and ensure ongoing items are documented via eMASS POA&M.