Responsibilities: Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information in accordance with the Navy’s Risk Management Framework. Assess system vulnerabilities in accordance with SPAWAR Navy Qualified Validator guidance (NQV) for security risks and propose and implement risk mitigation strategies.

Work closely with Information System Security Managers (ISSM), Information System Security Officers (ISSO), Information System Security Engineers (ISSE), program managers, lab managers, system managers and Information System Owners (ISO) to guide them through the RMF authorization process. Provide cybersecurity policy and regulation clarification and serve as a POC for cybersecurity-related questions. Review, maintain and update Enterprise Mission Assurance Support Service (eMASS). Draft, update and seek stakeholder concurrence for Security Assessment Plans (SAP). Evaluate accuracy and thoroughness of security control implementation and IS self-assessment results.

Monitor Vulnerability Remediation Asset Manager (VRAM) records for compliance. Conduct comprehensive assessment of the administrative, technical and physical security controls implemented within or inherited by a DoD IS to determine the overall effectiveness of control implementation per applicable guidance and industry best practices. Conduct analysis of provided security control compliance evidence. Write the RAR and draft the SAR Executive Summary to provide an assessment of the severity of weaknesses or deficiencies discovered in the information system and its environment of operation and recommend corrective actions to address identified vulnerabilities. Draft Plan of Actions & Milestones (POA&M) and monitor POA&M remediation activities

Education: BA/BS Degree from an accredited university in a Technical or Computer Science/Information Technology (IT) Discipline, and Certifications: Navy Qualified Validator: Level II: IAM or IAT Level 2 certification (e.g. Security CE).

Allowable Substitution: AA/AS Degree from an accredited university in a Technical or Computer Science/Information Technology, and Certifications: Navy Qualified Validator: Level II: IAM or IAT Level 2 certification (e.g. Security CE), and a minimum of seven (7) years of directly related experience. Or a HS Diploma or equivalent, and Certifications: Navy Qualified Validator: Level II: IAM or IAT Level 2 certification (e.g. Security CE), and nine (9) years of directly related experience.

Experience: At least three (3) years of experience performing work related to the position description above.

Other: An Active Secret Security Clearance is required.