Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Working hours

Regular working hours

Job source

www.dice.com

Tech stack

Xacta Information Systems Zero Trust Network Access Software Vulnerability Management Privacy Controls SARS Software Products Cloud Platform System RSA Archer Platform Servicenow

Requirements

• Extensive experience supporting federal cybersecurity compliance, information assurance, Risk Management Framework (RMF), security governance, and information system authorization.
• Strong knowledge of NIST SP 800-37, NIST SP 800-53 Rev. 5, FISMA, FedRAMP, NIST continuous monitoring guidance, and federal cybersecurity policies.
• Experience developing and reviewing System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), and Plans of Action and Milestones (POA&Ms).
• Expertise conducting security control assessments, identifying compliance gaps, evaluating control implementation evidence, and supporting Authorization to Operate (ATO) decisions.
• Experience supporting Information System Continuous Monitoring (ISCM), Ongoing Security Authorization (OSA), annual assessments, and security control validation.
• Strong knowledge of vulnerability management, security impact analysis, risk acceptance, audit findings, and corrective action tracking.
• Familiarity with federal GRC platforms such as CSAM, ServiceNow GRC, Xacta, or equivalent security authorization and compliance systems.
• Experience supporting security assessments for cloud environments, High Value Assets (HVAs), privacy controls, Zero Trust initiatives, and federal audit readiness.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com

Prepare application

• Draft this with your agent
• Open in Claude
• Open in ChatGPT
• Copy prompt