Cyber Policy Administrator

Herdt Consulting, Inc.; Radford (VA); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

3 weeks of paid vacation

Health benefits

401K program with company match

Comprehensive Medical, Dental, and Vision

Job summary

A cybersecurity consulting firm is seeking a Cyber Policy Administrator with strong experience in managing eMASS and ensuring regulatory compliance. The role involves liaising between technical and policy teams, implementing security controls, and managing accreditation processes. Candidates must hold a Bachelor's degree in an IT-related field and have an active DoD Secret clearance. The position offers a hybrid work model with comprehensive health benefits and competitive vacation time.

Qualifications

• Mid-to-senior level Cybersecurity Policy Administrator experience is required.
• Active DoD Secret security clearance is necessary.

Responsibilities

• Manage the eMASS environment, including reports and POA&M tracking.
• Implement and monitor technical security configuration controls.
• Create artifacts for accreditation packages.
• Evaluate information system designs for compliance.

Skills

Vulnerability Management

Project Management

Education

Bachelor’s degree or higher in an IT-related field

Job description

Serving as a subject matter expert, the Cyber Policy Administrator manages the eMASS environment and ensures regulatory compliance for the AECC project. This role involves working between technical and policy teams to implement security controls, manage POA&Ms, and maintain the Authority to Operate (ATO) for a cloud-native infrastructure.

Quick Facts

• Location:Radford, VA (Hybrid telework/onsite as needed)
• Security Clearance:Active DoD Secret
• Education:Bachelor’s degree or higher in an IT-related field
• Experience:Mid-to-senior level Cybersecurity Policy Administrator experience
• Work Schedule:Full-time

Mandatory Certifications

• DoD 8140:Cybersecurity ISSM (722 role or similar)

Key Responsibilities

• eMASS Management:Manage the Enterprise Mission Assurance Support Service (eMASS), including scan reports, STIG files, and POA&M tracking.
• Policy Implementation:Implement and monitor technical security configuration controls like STIGs and Security Requirements Guides (SRGs).
• Accreditation Support:Create artifacts for accreditation packages, including system diagrams and hardware/software inventories.
• Compliance Review:Evaluate information system designs and engineering change proposals for compliance with security regulations.

Required Technical Skills

• Vulnerability Management:Working knowledge of DoD STIGs and the IAVM process.
• Project Management:Experience effectively managing multiple large-scale cybersecurity projects.

Preferred Skills & Experience

• Administrative Automation:Experience automating routine administrative tasks is a plus.
• Systems Understanding:Broad understanding of network, storage, server, and application technologies.

What We Can Offer You

• Excellence:The chance to be part of a company that has a reputation for excellence in task execution.
• Time Off:Full-time associates receive 3 weeks of paid vacation each year plus 11 federal holidays.
• Health Benefits:Comprehensive Medical (Blue Cross Blue Shield), Secondary Insurance, Dental, and Vision.
• Financial Security:401K program with Fidelity (including company match) and Flexible Spending Account (FSA).
• Insurance:Short-term and Long-term Disability at no cost, plus Voluntary Life and AD&D options.