Process improvement, operations, and sustainment of the DIA Risk Management Framework (RMF) Program to ensure quality assessments are performed on all DIA Information Technology (IT) on behalf of Authorizing Officials (AO) and the Chief Information Security Officer (CISO).

Responsibilities

• Assist in centralization of A&A files/documentation and maintain files/library; ensure validity and integrity of all systems.
• Create, update, and delete entries in databases utilized for the tracking of system and network compliance.
• Ensure that all IA systems are properly documented with Configuration Management processes.
• Maintain the security accreditation status of systems/sites including the review of current documentation, site architectures and coordination with sites to ensure the documentation is accurate with the current site architecture, IAW DIA Policies and Processes.
• Perform, participate and support all assessment and authorization (A&A) efforts for systems, networks, and applications (all security domains) IAW DoD and IC requirements.
• Provide coordination for assessment metric submissions.
• Provide direct support in PM’s development of other A&A related systems bodies of evidence in accordance with current NIST, ICD, DIAD guidance, using the government provide A&A tool (e.g. XACTA).
• Provide weekly A&A metrics and reports
• Work in coordination with both internal and external systems administrators, configuration management, and network engineers to ensure proper configuration and adherence to security standards in regard to development actions.
• Provide guidance on the application of security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements, reviewing and determining the adequacy of required documentation,
• Assist Software Engineers and System administrator for A&A System of Record shall maintain the system and keep up to date on versioning, patching and anti-virus.

Qualifications

Awareness and understanding of the following:

• Intelligence Community and Department of Defense policy issuances such as
• Policy, Instructions, Manuals, Memorandums, Standards, and other issuance like documents.
• Risk Management Framework as described in NIST Directives, CNSSI 1253A and ICD- 503
• Federal laws, specifically pertaining to IT, Cyber Security, FISMA, and Intelligence.
• Ability to communicate both written and orally at a level sufficient for senior executive level leadership interaction;
• Ability to review, understand, and comprehend complex qualitative and quantitative IT and IA related metrics;
• Understanding IA operations & Continuous Monitoring;
• Ability to collect, analyze, track and disseminate IA requirements;
• Understanding of the implement and enforcement requirements for Security policy, processes, and training;
• Ability to coordinate and collaborate with service certifying officials

Requirements

• Minimum 8 years experience related to IT or security with at least a portion of the experience within the last 2 years. A Bachelor's degree in related field can substitute two years experience. 
• IAT III is desired.