Vacancy expired!
- Execute all steps of the Risk Management Framework (RMF) based upon NIST SP 800-37, Rev. 2
- Implement and assess NIST SP 800-53 controls and apply overlays as needed
- Synthesize analytical data to develop security-related documents such as System Security Plan (SSP), Configuration Management Plan (CMP), Contingency Plan (CP), Incident Response Plan (IRP), Business Impact Analysis (BIA), and Privacy Impact Assessment (PIA)
- Facilitate and lead discussions with stakeholders to ensure all security-related documents are accurate and up-to-date
- Ensure compliance with Governance, Risk and Compliance (GRC) and A&A standards and guidelines
- 5-10 years of experience in systems security.
- 1-3+ years of experience supporting Governance, Risk and Compliance (GRC), Assessment and Authorization (A&A), and Policy Framework Support
- Strong understanding of the Risk Management Framework (RMF) based upon NIST SP 800-37, Rev. 2, and experience implementing/assessing NIST SP 800-53 controls
- Strong oral and written communication skills
- One or more of the following certifications: Security+, CAP, GSEC, GSLC, CISM, CISA, CISSPOther Job Specific Skills