risk management framework

check out the Cyber Security & IT Resume course:
https://securitycompliance.thinkific.com/courses/resume-marketing-for-cyber-security-it
Coupon code: resumefeb2020
50% off (expires 29 Feb 2020)

check out the remote work course:
https://securitycompliance.thinkific.com/courses/find-it-remote-work

Check out the job:
Job Title: Cybersecurity Risk Management Framework SME
Location: #RemoteJob (#WorkfromHome)
Duration: 12 Months (Contract-to-Hire)
Job Description:
Active Secret Clearance Required

· KBRwyle is seeking candidates with Risk Management Framework (#RMF) experience to join a team of experienced RMF professionals that supports the Defense Health Agency (DHA).

Position Description:

· Primary responsibility is to perform tasks related to Assessment & Authorization (A&A) and cybersecurity under the Defense Health Agency (DHA) to obtain and maintain Authorizations to Operate (ATOs) for assigned DoD medical systems (i.e., applications, networks, devices). This position will be a part of a team developing recommended courses of action needed to transition current policies and procedures to the DHA RMF-approved processes.

Primary Responsibilities:

· Provide solutions to complex problems that require the regular use of expertise and creativity. Problems are broadly defined and solutions require the continuation of specialized theories and knowledge

· Serve as Subject Matter Expert (SME) on one or more technologies/skills related to A&A activities

· Conduct risk and vulnerability assessments of information systems to identify vulnerabilities, risks, and protection needs

· Actively participate in working group meetings to identify, plan, and execute strategies in response to emerging cybersecurity/RMF policies

· Attend and participate in regular A&A status meetings to facilitate progress and address potential issues of RMF system efforts

· Maintain awareness and knowledge of evolving security and risk management standards and communicate and apply relevant changes to existing processes

Day-to-day tasks are contingent on related experience and assigned role, and may include the following:

· Develop, update, and/or review RMF documentation to include Security Plans, Implementation Plans, Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports

· Assess system compliance against NIST, DoD, and DHA security requirements to include the NIST 800-53 controls and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)

· Produce evidence as necessary to support compliance status of NIST, DoD, and DHA security requirements

· Work with system administrators, engineers, and developers to create or update system/site policies, procedures, and process guides

Minimum Qualifications:

· BS degree and six (6) years of experience with Cybersecurity / Information Technology, or twelve (12) years of hands-on experience with Cybersecurity / Information Technology

· Demonstrated efficiency and experience in one or more of the following areas:

· RMF package development, including POA&Ms (mitigation statements), Security Plans, Risk Assessments, system/site policies, procedures, and processes, architecture diagrams, and hardware and software inventories

· Assured Compliance Assessment Solution (ACAS) and Host Based Security System (HBSS)

· DISA STIGs/SRGs validation

· NIST 800-53 control validation

· Continuous Monitoring and Risk Scoring (CMRS)

· RMF policy development and strategy implementation

· BIOMED experience (former technician, physician, engineer, etc.) installing, testing, using, maintaining, designing, and/or modifying medical equipment and applications

· Demonstrated experience with Risk Management Framework (experience under DHA a plus)

· Excellent customer service and organization skills

· Excellent oral and written communication skills

· Familiarity with NIST publications

· Active DoD Secret security clearance

· DoD 8570-compliant (CompTIA Security+ certified)

· Ability to obtain OS certification or complete approved related training within 180 days of hire

· Ability to travel up to 25-35%

· Experience with eMASS

360 Mt. Kemble Avenue, Suite 2000 | Morristown, NJ 07960
Office: 973.507.7582 | Fax: 973.998.2599
siddartha.s@artech.com | www.artech.com