Senior IA Specialist (FISCAM/FIAR SME)

DecisionPoint | Cortek

8d

About The Position

DecisionPoint Corporation is seeking a Senior Information Assurance (IA) Specialist / FISCAM-FIAR Subject Matter Expert (SME) to support our U.S. Transportation Command (USTRANSCOM) Integrated Booking System (IBS) program. This role leads cybersecurity, compliance, and audit readiness efforts, ensuring alignment with DoD Risk Management Framework (RMF), federal financial audit requirements, and enterprise security standards.The Senior IA Specialist serves as a key advisor on FISCAM (Federal Information System Controls Audit Manual) and FIAR (Financial Improvement and Audit Remediation) requirements, ensuring systems, processes, and controls meet audit and cybersecurity expectations. This role supports mission-critical transportation and logistics systems by integrating security, compliance, and audit readiness across the system lifecycle.The ideal candidate brings deep expertise in cybersecurity compliance, RMF, and financial audit frameworks, with the ability to lead efforts across technical, functional, and audit domains.

Requirements

• Active Secret Clearance
• IAT Level II certification (CompTIA Security+ CE or higher preferred)
• Minimum 7+ years of experience in Information Assurance, cybersecurity, or compliance within DoD environments
• Demonstrated experience with FISCAM and FIAR audit requirements and audit readiness activities
• Strong knowledge of DoD RMF processes and NIST SP 800-53 security controls
• Experience developing and maintaining RMF accreditation documentation (ATO, SSPs, POA&Ms, etc.)
• Experience with vulnerability scanning tools (Fortify, ACAS, SCAP or similar)
• Strong understanding of secure coding practices, system hardening, and security architecture
• Experience supporting continuous monitoring and security assessment activities
• Knowledge of NIST SP 800-128 and configuration management security practices
• Ability to lead compliance efforts across technical and functional teams
• Strong analytical, problem-solving, and communication skills
• Ability to operate in a fast-paced, mission-driven environment

Nice To Haves

• Experience supporting USTRANSCOM or DoD transportation/logistics systems
• Experience supporting financial systems or audit sustainment environments
• Familiarity with eMASS, PPSM, and DoD authorization processes
• Experience working in AWS GovCloud or cloud-based secure environments
• Advanced certifications such as CISSP, CISA, or CISM
• Experience integrating DevSecOps security practices into CI/CD pipelines

Responsibilities

• Serve as the FISCAM/FIAR SME, providing leadership on audit readiness, internal controls, and compliance activities
• Lead cybersecurity efforts across the IBS program, ensuring compliance with DoD RMF, NIST, and federal audit requirements
• Identify, assess, and mitigate security risks, threats, and vulnerabilities across the system lifecycle
• Design and enforce secure system and application practices aligned with STIGs, OWASP, and DoD security standards
• Lead development and maintenance of RMF accreditation packages, including ATO, ATC, and IATT artifacts
• Ensure implementation of NIST SP 800-53 security controls and integration of security into the SDLC
• Conduct and oversee security assessments, audits, and control validation activities
• Perform and review vulnerability scans using tools such as Fortify, ACAS, and SCAP, ensuring timely remediation
• Track and manage vulnerabilities, ensuring proper documentation and closure of findings
• Maintain and manage POA&Ms and support remediation tracking and reporting
• Develop and maintain security documentation within eMASS or other Government systems
• Support continuous monitoring activities, including automated and manual security assessments
• Provide audit support, including preparation of artifacts, responses to findings, and coordination with auditors
• Ensure compliance with NIST SP 800-128 and security-focused configuration management practices
• Collaborate with Government, financial, and technical teams to ensure alignment between system controls and audit requirements
• Provide regular security metrics, reporting, and compliance status updates to stakeholders and leadership
• Support secure system design, including encryption, logging, and secure communication protocols

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed