Senior Cybersecurity Internal Controls Administrator w/Secret Clearance

TekSynap•Radford, VA

11h•$125,000 - $175,000•Onsite

About The Position

TekSynap is seeking a Senior Cybersecurity Internal Controls Administrator to support an ITES task order at Radford Army Ammunition Plant in Radford, Virginia. The position provides cybersecurity internal-controls and Risk Management Framework (RMF) support in accordance with DoDI 8500.01, DoDI 8510.01, and AR 25-2. Work includes Enterprise eMASS services, RMF package development and maintenance, security documentation, compliance reviews, vulnerability remediation coordination, and management of security risks and records. This is an office-based role with a Monday–Friday day-shift schedule. Evening and weekend work may be requested to meet program and contract needs, and travel is expected to be less than 10%. The position supports an upcoming government contract proposal and is contingent on contract award and government approval. Candidates must meet the stated requirements and may be asked to sign a Letter of Commitment. U.S. citizenship and a Secret clearance are required.

Requirements

Ten years of cybersecurity experience focused on RMF and internal controls.
Extensive hands-on experience with Enterprise eMASS and RMF implementation and maintenance.
Proficiency developing RMF packages and maintaining asset inventories.
Experience scheduling and coordinating system validation reviews.
Experience generating security artifacts for compliance and audits.
Strong knowledge of ACAS and STIG report analysis and remediation coordination.
Expertise creating and maintaining POA&Ms.
Ability to conduct annual security reviews and compliance checks.
Experience participating in COOP and Incident Response testing exercises.
Knowledge of maintaining Army PPSM and Circuit Registry records.
Experience with Software Assurance processes, reviews, documentation, and tracking.
Familiarity with DoDI 8500.01, DoDI 8510.01, and AR 25-2 cybersecurity policies and frameworks.
Strong analytical, problem-solving, and organizational skills.
Excellent written and verbal communication skills, including the ability to coordinate across diverse teams.
Experience with Army enterprise monitoring tools and compliance practices.
Deep understanding of security regulations, frameworks, and industry best practices.
Ability to work collaboratively and liaise with multiple stakeholders.
Experience with incident response activities and security operations.
Understanding of COOP and Communication Plans.
Demonstrated experience supporting government agencies, customers, or contracts in federal environments, including the IC, DoD, Federal Civil agencies, or military organizations.
Cybersecurity certification such as CISSP or equivalent.
U.S. citizenship.
Secret clearance – IT-II Non-Critical Sensitive clearance or Tier 3 (T3) investigation.

Nice To Haves

Prior experience supporting the same or a similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable.
Bachelor’s degree in computer science, Information Technology, or Cybersecurity, or equivalent experience.

Responsibilities

Provide cybersecurity support in accordance with DoDI 8500.01, DoDI 8510.01, and AR 25-2.
Deliver Enterprise eMASS and RMF services, including developing and maintaining RMF packages.
Maintain asset lists and system categorizations, ensuring documentation and tracking are accurate.
Schedule, coordinate, and facilitate system validation reviews and assessments.
Generate and maintain artifacts demonstrating control compliance and supporting audits.
Analyze ACAS and STIG reports and coordinate remediation with relevant teams.
Create, track, and manage POA&Ms for identified risks and vulnerabilities.
Perform annual security reviews to verify ongoing compliance.
Participate in COOP and Incident Response testing to validate preparedness.
Maintain Army PPSM and Circuit Registry records in accordance with Army regulations.
Participate in Software Assurance reviews and ensure security items are documented and tracked through eMASS POA&Ms.
Keep security compliance and control documentation accurate and up to date.