Program Security Specialist - Senior

FISMA Specialist

Looking for a FISMA Specialist familiar with domain knowledge and experience across the DNI enterprise.

Primary Responsibilities:

Cybersecurity

• Translating cybersecurity needs and capabilities into requirements and detailed technical solutions.
• Analyzing IC, USG, and industry cybersecurity best practices in order to identify gaps and improvement opportunities of IC Cybersecurity requirements.
• Developing and publishing baseline security requirements for Services of Common Concern and other common enterprise services to ensure capabilities are in compliance with USG and IC cybersecurity directives and policies; are in alignment with published strategies and architectures; and are interoperable.
• Developing security requirements and constraints for the IC IE to provide input to foundational technical documents, including but not limited to, program architectural artifacts, business cases, and concept of operations.
• Conducting critical path analysis, risk analysis, and task dependency analysis.
• Providing, coordinating, and ensuring the inclusion of prioritized cybersecurity artifacts (i.e. policy, architecture, technical) specifications, and design patterns) into the IC Enterprise Standards Baseline (IC ESB).
• Developing assessment criteria (metrics, measures, key performance indicators) for security requirements and implementation guideline.
• Assisting service providers' and partners in complying with USG and IC cybersecurity directives and policies.
• Coordinating involvement in and participating in IC and National-level cybersecurity exercises. The contractor shall provide post exercise analysis and recommendations on how to address exercise key findings.
• Participating in external cybersecurity and data protection related governance, policy, and standards bodies (i.e., CNSS, NIST, DoD, and DHS) and providing written summary reports and recommendations for follow on actions if needed.
• Evaluating existing and emerging technologies and recommend strategies to support mission requirements.
• Developing concepts of operations for deploying and integrating security solutions, managing risk, reducing vulnerabilities, and ensuring successful implementation.
• Developing and publishing baseline security requirements to ensure IT capabilities are in compliance with USG and IC cybersecurity directives and policies.

Requirements

• Project management experience for individual and team projects (ability to track detailed tasks and ensure timely delivery).
• Support the Chief Information Office (CIO) metrics program in the development, collection, analysis, and reporting of Cybersecurity data for the Cybersecurity Scorecard (Cybersecurity Discipline).
• Provide support in the collection, normalization, and integration of varied data sets into a single repository/report.
• Must have a thorough understanding of the Federal Information Security Management Act (FISMA); to ensure compliance with annual FISMA deliverables and reporting.
• Must have a thorough understanding Risk Management Framework Implementation and Governance.
• Analyze and report organizational security posture trends.
• Ability to work quickly, efficiently, and accurately in a dynamic and fluid environment.
• Experience in Cyber Security, position level based on experience in the technical area.
• Requires a BA degree and 12 – 15 years of prior relevant experience or Master’s with 10– 13 years of prior relevant experience.
• Min 5 year working with or in the IC.

CONDITIONS OF EMPLOYMENT:

• TS/SCI w/Poly Required
• U.S. Citizenship Required
• Federal Employment Suitability
• E-Verify Eligibility Required*

ASG is an equal opportunity employer (EEO)

*ASG participates in the USCIS Electronic Employment Eligibility Verification Program (E-Verify). E-Verify helps employers determine employment eligibility of new hires and the validity of their social security numbers.

Benefits

• Health Insurance
• Paid time off
• Dental insurance
• 401(k)
• Vision insurance
• Tuition reimbursement
• Life insurance
• 401(k) matching
• Disability insurance
• Retirement plan
• Referral program
• Health savings account
• Flexible spending account