Assess and Authorize (A&A) Analyst
Support the DoD customer’s Cybersecurity Assess & Authorize (A&A) group, ensure that all information systems are authorized by the Authorizing Official (AO) and that technologies are assessed prior to introduction into the network. Support multiple Authorizations to Operate (ATOs)/systems per DoDI 8510.01, NIST SP 800-30, and NIST SP 800-37. Support authorization efforts of approximately seven (7) packages on an annual basis. Responsibilities:
• Develop a Risk Management Framework (RMF) Executive Package for each Authorization that will include a System Security Plan, Security Assessment Report (SAR), Plans of Actions and Milestones (POA&M), Risk Assessment Report (RAR), and Authorization Decision Document. • Register systems in the Enterprise Mission Assurance Support Service (eMASS) application • Utilize the eMASS application to support and automate the RMF • Register and maintain all Agency connections into SNAP. • Provide monthly and annual SNAP registration metrics. Requirements:
• Active Secret security clearance
• At least 8-10 years of related experience
• DoD IAM III required certification/s (one of the following):
o CISM
o CISSP (or Associate)
o GSLC
o CCISO