Job Summary
The primary objective of this role is to oversee the Risk Management Framework (RMF) process in collaboration with Department of Homeland Security (DHS) clients and engineering teams. This includes evaluating and authorizing systems, ensuring the maintenance of an Authority to Operate (ATO), and preparing necessary security documentation. Additionally, the role involves ongoing monitoring and assessment of vulnerabilities, coordinating remediation efforts, and aiding in contingency planning, incident response strategies, and disaster recovery drills.
Responsibilities
- Lead the RMF process with DHS stakeholders and engineering units.
- Assess and authorize systems, ensuring compliance with security policies.
- Maintain and manage the Authority to Operate (ATO) status.
- Prepare and update relevant security documentation.
- Conduct continuous monitoring and perform vulnerability assessments.
- Coordinate remediation activities and support incident response initiatives.
- Engage in disaster recovery exercises and planning.
Qualifications
- A minimum of five years of experience in IT security roles, specifically as a security lead or information security analyst.
- Bachelor’s degree in computer science or a related discipline, or equivalent experience.
- Deep understanding of NIST SP 800-53 and the Risk Management Framework (RMF).
- Experience with AWS and other cloud technologies.
- Proficiency in vulnerability scanning and security documentation practices.
- Strong skills in stakeholder collaboration and communication.
- Possession of an ISSO-relevant certification and capability to obtain and sustain DHS suitability.
