Back to search
Qualifications:
- Active TS/SCI SSBI clearance
- B.S. Computer Science, Information Technology, or a related field
- 10+ years of RMF/Cybersecurity experience
- Advanced experience serving as an ISSM or equivalent cybersecurity manager for federal or DoD systems and complex authorization boundaries.
- Expert knowledge of RMF, Assessment and Authorization, continuous monitoring, security-control assessment, vulnerability management, POA&M governance, and authorization decision support.
- Expert ability to interpret federal, DoD, and Air Force cybersecurity requirements and translate them into enforceable technical and program guidance.
- Demonstrated experience overseeing SSPs, RARs, POA&Ms, control evidence, assessment reports, system inventories, authorization packages, and Mission Impact Assessments.
- Strong proficiency with eMASS and ITIPS or comparable federal authorization and portfolio-management systems.
- Experience directing vulnerability assessments, risk analysis, mitigation planning, remediation validation, trend reporting, and executive risk escalation.
- Demonstrated ability to advise Authorizing Officials and senior leaders and to provide clear, defensible recommendations involving mission, operational, and cybersecurity risk.
- Experience leading cybersecurity personnel, assigning and reviewing work, enforcing quality standards, and coordinating across technical and program-management disciplines.
- Exceptional leadership, stakeholder-management, analytical, technical-writing, briefing, governance, and decision-support skills.
- Ability to manage concurrent system authorization actions and recurring PWS deliverables while maintaining artifact currency and meeting deadlines.
- Active DoD 8570 IAM Level III and DoD 8140 System Administrator certification
Duties:
- Provide senior cybersecurity management and governance across the DAF FM portfolio and ensure consistent, compliant execution of the RMF lifecycle.
- Advise the FM Authorizing Official, AODR, program offices, system owners, and senior leadership on cybersecurity policy, risk posture, authorization strategy, and compliance decisions.
- Analyze federal, DoD, and Air Force policies, directives, standards, and guidance and establish actionable implementation direction for FM systems.
- Oversee security control selection, implementation, assessment, validation, authorization, ongoing authorization, and continuous monitoring.
- Establish quality-control expectations for SSPs, RARs, POA&Ms, assessment findings, authorization evidence, inventories, and other required artifacts maintained in eMASS and ITIPS.
- Review and approve cybersecurity documentation and staffing packages for technical accuracy, completeness, consistency, traceability, mission impact, and decision readiness.
- Lead portfolio-level vulnerability and risk management, including assessment strategy, risk analysis, mitigation planning, remediation governance, trend analysis, and escalation of high-risk conditions.
- Coordinate remediation efforts with system owners, ISSOs, cybersecurity analysts, engineers, developers, database and infrastructure teams, and program management offices.
- Monitor authorization status, RMF artifact currency, ATO expiration dates, vulnerability trends, POA&M closure rates, overdue actions, and residual risk across the FM AO boundary.
- Provide risk-informed recommendations and comprehensive staffing packages supporting ATO, ATO with Conditions, or Denial decisions.
- Develop or oversee Mission Impact Assessments, security-control assessment findings, POA&M escalation reports, cybersecurity policy updates, and leadership decision materials.
- Facilitate resolution of information-assurance issues among system owners, security personnel, program offices, and the FM AO.
- Lead cybersecurity status briefings, annual program reviews, AO decision-support sessions, governance forums, and working groups.
- Oversee the cybersecurity workforce’s compliance with role-based qualification, certification documentation, access, security, and training requirements.
- Coordinate cybersecurity implications of configuration changes, system modifications, development/test activities, vulnerability remediation, and production-readiness decisions.
- Ensure cybersecurity documentation governance, version control, records traceability, quality assurance, and QASP-aligned performance reporting.
- Support COOP, contingency, incident, emergency, and mission-continuity activities requested by the PMO.
Learn more about this Employer on their Career Site
