> Markdown version of [/jobs/ext/4719455-information-assurance-analyst-sme](https://www.wearedevelopers.com/jobs/ext/4719455-information-assurance-analyst-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Assurance Analyst, SME - **Company:** Feditc Llc - **Location:** Indianapolis, IN, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Xacta, Cyber Security, Data Security, Software Vulnerability Management, IT General Controls (ITGC), Information Technology, Patch Management, Plan of Action and Milestones, Vulnerability Analysis - **Published:** November 14, 2026 - **Apply:** https://www.careerbuilder.com/job-details/information-assurance-analyst-sme-indianapolis-in--abc25bb5-245d-4f51-b62b-3b81112525b8 ## About the Role Information/Data Security (InfoSec), Analysis Skills, Intelligence Agencies, United States Department of Defense (DoD), Business Support, Business Growth, Leadership, FISMA - Federal Information Security Management Act, Computer Systems, Analysis Skills, * Minimum 10 years of information assurance experience in DoD or Federal environments with increasing responsibility * Expert knowledge of DoD RMF (DoDI 8510.01), NIST SP 800-37, and NIST SP 800-53 security controls * Demonstrated experience managing A&A packages in eMASS * Experience supporting FISMA compliance programs and federal cybersecurity audits (FISCAM, SSAE) * Strong knowledge of continuous monitoring, vulnerability management, and POA&M processes * Experience with security control assessments and validation methodologies * Understanding of DoD IT security policies, DISA STIGs, and compliance frameworks * Experience coordinating with Authorizing Officials, ISSMs, and security validators * Proven ability to lead compliance teams and manage multiple concurrent authorization packages * Ability to support COOP exercises and emergency operations, * CAP, CASP+, or equivalent RMF certification * Experience with FISCAM audit support and IT general controls testing * Xacta, Archer, or similar GRC platform experience * Experience with classified system accreditation * DFAS or DoD financial system RMF/IA experience * Experience achieving two-year or extended ATO packages Education: * BA/BS Degree Certifications: * 722 ISSM Advanced certifications (CISSP, CISM, or equivalent) * Computing Environment (CE) certification required for privileged access roles * Must obtain and maintain all mandatory DoD 8140 certifications Clearance: * Active Top Secret/ SCI clearance is required. * Must be a United States Citizen and pass a background check. * Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC'S Client(s)/Customer(s)/Prime contractor(s). ## Description * Lead and supervise Information Assurance staff delivering RMF compliance and accreditation support for the DFAS CCE * Direct Assessment & Authorization (A&A) activities under DoD Risk Management Framework (RMF) using eMASS * Manage FISMA compliance including annual control testing, documentation, and reporting * Oversee preparation and maintenance of all RMF artifacts including Security Plans, Control Validations, POA&Ms, and Acceptance of Risk documentation * Coordinate support for FISCAM audits, DFAS internal audits, and SSAE attestations * Ensure ATO/ATC packages remain current and compliant for all CCE mission systems (cloud and on-premises) * Direct continuous monitoring activities including vulnerability scan review, patch management compliance, and IAVA tracking * Lead POA&M management, root cause analysis, and remediation coordination * Coordinate with DFAS CIO validator and ISSM on all RMF actions and compliance requirements * Develop and maintain IA documentation including policies, procedures, and audit evidence * Ensure 100% RMF certification maintenance and 95%+ FISCAM control pass rates