Responsibilities:

• The successful candidate will leverage th eir strong technical background and knowledge to support the Sponsor’s system accreditation efforts, to include creating Body of Evidence (BOE) documentation, responding to/implementing/documenting required controls, and completing required tasks/actions.

• Creating, updating, maintaining, and interpreting required Body of Evidence (BOE) documentation

• Working with management, internal teams, and Sponsor’s authorities to successfully navigate the Sponsor’s accreditation process for all systems

• Documenting responses to required controls and updating as necessary

• Maintaining a robust library of documentation, to include network diagrams for cyber defense capabilities and sensors, and making documentation available to all personnel with appropriate need-to-kno w

• Maintaining, updating, and conducting routine vulnerability scanning across all Sponsor networks

• Maintaining system baselines and configuration management items, including security event monitoring policies

• Working with all stakeholders to ensure complete and functioning systems that meet all requirements

• Recommending, and when approved, implementing process and policy improvements

  Required Qualifications: 

• Significant experience navigating the Sponsor's accreditation process and ICD 503 requirements, especially as it relates to creating A&A Body of Evidence (BOE) documentation

• Significant experience meeting security requirements in the Sponsor's environment or similar environments 

• Experience working across a large team to drive a security agenda

• Experience working with complex, intertwined systems and data flows

• Experience inventorying complex networks, and with network documentation (security compliance, configuration management, patching, centralized authentication, removable media, etc.)

• Experience creating, maintaining, and communicating complex information technology documentation, particularly network and security documentation

• Self-starter with excellent people skills - able to work across teams, organize meetings/boards, and drive change throughout an organization

• Fullscope Polygraph

Desired Qualifications: 

• Certified Information Systems Security Professional (CISSP certification)

• Experience with the Sponsor’s primary cyber risk and compliance automation tool s