Authorizing Official Designated Representative (AODR) Support Analyst

ECS

Washington (District of Columbia)

Hybrid

USD 170,000 - 190,000

Full time

2 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Everforth ECS seeks an Authorizing Official Designated Representative (AODR) Support Analyst for our Washington, DC hybrid office. The role supports a full range of cyber security services on a long-term government contract, requiring a strong background in RMF and senior stakeholder engagement.

We require 13+ years in cyber/IT with executive RMF consulting experience, an active clearance, and relevant certifications.

Qualifications

Bachelor’s degree in systems engineering, computer science, computer engineering, information technology, MIS or equivalent.
Active Secret clearance or higher.
At least one Cybersecurity certification (CISSP, CISA, CISM, GSEC, CGRC, PMP).
Combined 13+ years in cyber, IT or related fields.
5+ years of executive-level cyber RMF consulting experience for large federal programs.
4+ years ISSO experience for enterprise systems.
Strong interpersonal, written, and verbal communication; ability to interact with senior management.
Advanced understanding of GRC tools, policy, and RMF, including NIST standards.
Experience with NIST RMF and GRC; capable of guiding enterprise implementations.
Ability to interpret Federal legislation and guidance; knowledge of Privacy Act.

Responsibilities

Serve as the primary support for all AODR-related responsibilities as outlined in NIST SP 800-37.
Provide cyber consultation, oversight, and RMF deliverable approvals for a Federal client.
Respond to system-level inquiries with minimal supervision.
Maintain collaboration with client cyber and business contacts to support compliance deliverables.
Provide clear oral and written responses and resolve issues as directed.
Drive changes to cybersecurity programs to meet agency-wide requirements in a cost-effective manner.
Develop program-level security documentation and compliance oversight activities.
Support independent security and privacy control assessments (SA&A).
Support continuous monitoring to increase visibility of network activity.

Skills

Secret clearance

RMF consulting

ISSO experience

NIST RMF

GRC tools

Policy & compliance

Stakeholder management

Strong communication

Federal regulations understanding

Information security leadership

Education

Bachelor’s degree in systems engineering, CS, IT, or related

Job description

Job Description

ECS is seeking an Authorizing Official Designated Representative (AODR) Support Analyst to work in our Washington, DC (hybrid) office. Please Note: This position is contingent upon contract award. We are looking to hire an AODR Support Analyst to support a full range of cyber security services on a long-term contract in Washington DC and the surrounding areas. These positions are full time/permanent and will support a US Government civilian agency. The positions are available immediately upon finding a qualified candidates with the appropriate background clearance.

Position Responsibilities

Serve as the primary support for all AODR-related responsibilities as outlined in NIST SP 800-37.

Provide significant cyber consultation, oversight services, authoritative technical support, and approval of Risk Management Framework (RMF) deliverables (security categorization, security baseline control selection, system security plan, contingency plans, POA&Ms, security assessment cost estimates, security assessment plan, security assessment report, pre- and post-assessment remediation of security assessment findings, risk assessment calculations, and security authorization recommendations) on behalf of the Department Authorizing Official (AO) within the service delivery timeframes established by the Federal client.

Serve as the primary and/or backup individual responsible for responding to system-level inquiries, based on system assignments, with minimal supervisory attention.

Provides comprehensive customer service and maintain a collaborative rapport with client cyber and business entities and senior managers, employees, and other internal and external contacts in support of cyber security compliance deliverables and mission support work.

Provide accurate and concise oral and written responses to inquiries and respond to concerns with initiative and decisiveness and take appropriate steps to resolve any issue as directed/authorized.

Be a driver of holistic and enterprise-scale changes in cyber-security programs within large Federal client. Act as a disruptor to the status-quo to drive needed changes to cybersecurity and related agency-wide workflows (Privacy, SDLC, procurement, etc.) to ensure that security and privacy best-practices and statutory and regulatory requirements are met in a holistic and cost-effective manner.

Provide consultation expertise at various levels with a large Federal agency to develop and maintain enterprise-scale cyber security program that reacts quickly to changing regulatory and operational drivers, including emerging technical, operational and management risk-drivers:
- Participate in Daily, Weekly, and Monthly status meetings with key Government personnel, at times on short notice, to ensure stakeholders are informed of program status and progress on various cyber initiatives. Provide an opportunity to set priorities, identify opportunities or concerns, and coordinate resolution of identified problems.
- Develop program level security documentation, audit liaison activities, and compliance oversight activities to strengthen the security program and promote compliance with the Risk Management Framework (RMF).
- Support the performance of independent security and privacy control assessments in support of Security Assessment & Authorization (SA&A).
- Support the management and implementation of continuous monitoring solutions to increase the visibility and transparency of network activity.

Salary Range: $170,000-$190,000

General Description Of Benefits

Required Skills

A bachelor’s degree from an accredited college in systems engineering, computer science, computer engineering, information technology, management information systems or equivalent.

Active Secret clearance or higher.

At least one Cybersecurity or related certification. Preferred include:
- Certified Information Systems Security Professional (CISSP)
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)
- GIAC Security Essentials Certification (GSEC)
- Certified in Governance, Risk, and Compliance (CGRC)
- Project Management Professional (PMP)

Combined 13+ years in cyber, IT or related fields.

5+ years of Executive-Level cyber RMF consulting experience advising Cybersecurity programs in large federal organizations.

4+ years Information Systems Security Officer (ISSO) experience for enterprise class systems and applications.

Strong interpersonal and human relations skills, including ability to communicate technical concepts to non-technical personnel.

Strong written, verbal, and presentation skills, including demonstrated ability to interact effectively with Senior Agency management and leadership.

Strong stakeholder management and engagement skills with staff at all levels, including ability to collaborate with people of varied technical backgrounds and management levels.

Advanced understanding of and experience with GRC tools, policy, procedures, and processes, including (but not limited to) FISMA audits and compliance, NIST, RMF, and recent Executive Orders.

Experience with NIST Risk Management Framework and Governance, Risk & Compliance (GRC) and Information Assurance capabilities/tools.

Strong familiarity with NIST Risk Management Framework at the subject matter expert level, particularly including SP 800-30, -37, -39, -137, -53, and -53A/B.

Ability to guide the development of enterprise-specific implementation guidance for agency management.

Ability to analyze and interpret Federal legislation, directives, Office of Management and Budget (OMB) mandates, and guidance provided by the National Institute of Standards and Technology (NIST) against existing information security and privacy policy to identify required updates.

Ability to conduct research on new and emerging information technologies and develop comprehensive information security and privacy policy, standards/guidelines, and procedures to facilitate the implementation of information security and privacy controls. Must have working knowledge of the Privacy Act of 1974 (as amended), the Federal Information Security Modernization Act (FISMA).

Desired Skills

Experience managing Security Controls Assessments.

Experience overseeing the development and execution of security and privacy assessment plans in accordance with NIST SP 800-53A, as amended, requirements, for each security assessment project.

Experience overseeing enterprise-scale standards, guidance, administration, templates, reports, processes and procedures, and leverage communication vehicles used by the key stakeholders.

Knowledge of penetration testing principles, tools, and techniques.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value