Cyber Risk Management Analyst at Astrion

Washington, District of Columbia, United States -

Full Time

Start Date

Immediate

Expiry Date

24 Dec, 25

Salary

0.0

Posted On

25 Sep, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, Risk Management Framework, Authorization and Assessment, eMASS, MS Office, Security Assessment Plans, Continuous Monitoring Plans, Plans of Actions and Milestones, Navy IT Systems, DoD Policies, Change Control, IAVM, EXORD, FRAGO, ACAS, STIGs

Industry

Defense and Space Manufacturing

Description

Overview Cyber Risk Management Analyst Job Location: Washington D.C./Hybrid Job Status: Full Time Clearance: Secret Astrion has an immediate opening for a Cyber Risk Management Analyst supporting the Program Executive Office Integrated Warfare Systems Above Water Sensors Directorate's (PEO IWS 2.0) Information Systems Security Manager. Hybrid or remote work is allowed with limitations. Applicants must have the ability to regularly access SIPR at contract prime's 20 M Street office located in Washington DC. In rare circumstances, having regular access to SIPR elsewhere is suitable Role and Responsibilities: You will provide direct support to the U.S. Navy’s Program Executive Office Integrated Warfare Systems Above Water Sensors Directorate's (PEO IWS 2.0) Information Systems Security Manager. You will be responsible for the Authorization and Assessment (A&A) review process for over 30 new and existing above water sensor and laser systems ensuring that RMF cybersecurity requirements are satisfied in accordance with applicable DOD, NIST, Department of the Navy (DON), and NAVSEA series instructions. You will provide Navy Risk Management Framework (RMF) cybersecurity support by performing full package review of RMF process steps, as defined in the Navy's RMF Process Guide and Business Rules. You will conduct in-depth reviews of authorization packages and artifacts within Enterprise Mission Assurance Support Service (eMASS), reviewing, analyzing, and reporting on current authorization statuses for all systems within PEO IWS 2.0’s portfolio and review Security Assessment Plans, System-Level Continuous Monitoring Plans, Implementation Plans, Security Control Tailoring Plans, Plans of Actions and Milestones, and Security Assessment Reports. You will also advise the ISSM and other program stakeholders regarding A&A cybersecurity matters to include change control, IAVM, EXORD’s, FRAGO’s, DoD and DoN Policy. You must have the ability to work independently and produce high quality work with little to oversight on products. Security Clearance Requirements: DOD SECRET Clearance is required Requirements: Experience with Department of Navy (DON) Risk Management Framework (RMF) Experience with Enterprise Mission Assurance Support Service (eMASS) Minimum 3 years of demonstrated expertise evaluating cyber compliance of a system against current Risk Management Framework (RMF) policies including experience conducting assessments using ACAS, STIGs and SRGs Proficiency with MS Office suite to include MS Visio DoD Cybersecurity Workforce (CSWF) IAT II certification (i.e. Security + CE) Desired Qualifications: Current Navy Flankspeed access, SIPR token, and CAC is strongly desired Bachelor’s degree Fully Qualified Navy Validator (FQNV) Level II or above DoD 8570 Information Assurance Management (IAM) III or IAT III Certification Knowledge of Navy IT sites, systems, and infrastructure, including Assess Only and PIT Knowledge of applicable Navy systems, networks, and IT infrastructure Experience working in a DoD acquisition program office environment Travel Requirements: No travel is required.

Responsibilities

You will support the U.S. Navy’s Program Executive Office Integrated Warfare Systems Above Water Sensors Directorate's Information Systems Security Manager by ensuring RMF cybersecurity requirements are satisfied. This includes conducting in-depth reviews of authorization packages and advising stakeholders on cybersecurity matters.