Information Assurance / Cyber Security Analyst

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities

• Develop and maintain Authorization to Operate (ATO) packages in collaboration with system owners and relevant stakeholders.

• Conduct Assessment Procedure (AP) testing and evaluations to assess the implementation and effectiveness of security controls.

• Review and contribute to security control implementation statements, ensuring they align with applicable authorization requirements.

• Work with system teams to review, update, and create Plans of Action and Milestones (POA&Ms), supporting the resolution of identified security and compliance gaps.

• Guide system teams in navigating the Enterprise Mission Assurance Support Service (eMASS) governance, risk, and compliance tool.

• Support system authorization processes, security artifact development, control implementation documentation, and POA&M management.

• Provide guidance throughout each stage of the Risk Management Framework (RMF) process and associated eMASS workflows.

• Analyze and develop authorization documents, policies, standard operating procedures (SOPs), POA&Ms, and related artifacts to identify gaps and establish remediation schedules.

• Coordinate directly with system stakeholders to address outstanding authorization requirements and execute activities in accordance with established procedures.

• Review and develop security artifacts that meet Department of Defense (DoD) authorization and compliance requirements, mapping documentation to applicable NIST SP 800-53 controls.

• Communicate authorization requirements and technical security findings clearly to staff, system teams, and leadership.

• Facilitate stakeholder meetings, maintain client relationships, and coordinate activities needed to advance authorization and compliance efforts.

Requirements

• Bachelors degree in a STEM discipline or a related field.

• At least 10 years of recent experience performing information assurance, cybersecurity, authorization, and compliance responsibilities relevant to this position.

• Demonstrated experience with Authorization to Operate (ATO) and Interim Authorization to Operate (IATO) processes, the Risk Management Framework (RMF), and NIST SP 800-53 Revision 4.

• Familiarity with SAP financial systems, STIG Viewer, federal IT and cloud security policies, and the eMASS governance, risk, and compliance platform.

• Experience with Platform as a Service (PaaS), Software as a Service (SaaS), and Infrastructure as a Service (IaaS) environments, as well as FedRAMP and AWS GovCloud.

• Understanding of network and server topologies, configurations, security controls, and authorization documentation requirements.

• Active professional certification in at least one of the following: CISSP, CISA, CAP, CISM, or CRISC.

• U.S. citizenship and an active Secret security clearance are mandatory.

• Ability to work remotely while attending periodic on-site meetings at Picatinny Arsenal, New Jersey.

• Strong analytical and documentation skills, with the ability to identify compliance gaps, evaluate security requirements, and develop actionable remediation plans.

• Effective communication and stakeholder management skills, including the ability to explain technical authorization requirements to audiences with varying levels of technical expertise.

• Ability to coordinate multiple activities, facilitate meetings, and collaborate with system owners and technical teams to achieve authorization milestones.

Benefits

• Salary range: $125,000–$130,000 per year.

• Work arrangement: Remote, with periodic on-site meetings at Picatinny Arsenal, New Jersey.

• Professional scope: Opportunity to contribute to federal cybersecurity, information assurance, and authorization initiatives.

• Healthcare coverage, retirement plans, paid time off, and other employee benefits were not specified in the provided job description.