Information Assurance Program Lead

Texas Instruments; Dallas (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Texas Instruments is seeking a Security Authorization Program Lead to drive the RMF/ATO process for classified environments. You will define the documentation strategy and work with DCSA, ITPSO, ISSM, and FSO to develop a compliant package.

Responsibilities include authoring SSP, POA&M, SAR, and contingency plans; translating design details into compliance artifacts; coordinating across engineering and security teams, and guiding consultants to deliver a coherent, defensible final package with

Qualifications

• Experience leading RMF/ATO packages for classified environments.
• Ability to translate system design into compliant security documentation.
• Strong collaboration with engineers, security leadership, and external stakeholders.

Responsibilities

• Lead development of RMF/ATO package for classified cloud-based information systems.
• Coordinate with DCSA, ITPSO, ISSM, FSO and leadership to plan and develop a compliant RMF package.
• Author SSP, POA&M, SAR, and Contingency Plans; ensure coherence and defensibility of final package.
• Conduct security control assessments and support remediation per NIST and DISA STIGs.
• Oversee continuous monitoring readiness and engage with stakeholders to maintain compliance.

Skills

RMF/ATO knowledge

NIST SP 800-53

DISA STIGs

Security documentation

Continuous monitoring

Job description

Are you passionate about cybersecurity and innovative IT solutions? Join our dynamic team as a Security Authorization Program Lead! This position is crucial for ensuring the security, compliance, and operational excellence of our cutting-edge information systems.

Mission

Enable TI to identify, win, and support space, avionics, and defense electronics customers by ensuring the security, compliance, and operational excellence of our cutting-edge information systems.

TI Federal is building its classified security compliance capability from the ground up. We are looking for someone who can lead the creation of a classified system authorization package for Secret-level environments in a setting where the architecture, evidence base, and operating model are still taking shape.

This is not a maintenance role. You will help define the documentation strategy, drive package development, and turn evolving technical reality into a defensible RMF / ATO submission. You will work closely with engineers, security leadership, and external stakeholders, while also managing consultant contributions and holding the overall quality bar for the final package

Key Responsibilities:

Cybersecurity Compliance & Risk Management:

• Lead development of a new RMF / ATO package for classified cloud-based information system, including:
• Working with the DCSA, ITPSO, ISSM, FSO, IT, engineers, and leadership to plan and develop a compliant Risk Management Framework (RMF) package leading to a successful Authorization to Operate (ATO).
• Authoring and integrating core compliance and cybersecurity documentation, including System Security Plans (SSP), Plan of Action and Milestones (POA&M), Security Assessment Reports (SAR), and Contingency Plans.
• Translating actual system design and implementation details into accurate compliance documentation.
• Coordinating across engineering, security, and program stakeholders to keep authorization work moving.
• Navigate ambiguity: Continuously adapt to evolving requirements and shifting stakeholder expectations while keeping the authorization effort on track.
• Reviewing and integrating consultant work product, ensuring the final package is coherent, accurate, and defensible.
• Helping to establish the foundation for ongoing continuous monitoring after authorization.
• Perform security control assessments and remediation:
• Support implementation and validate NIST SP 800-53 controls and DISA STIGs.
• Conduct periodic reviews of information systems to verify compliance with security authorization packages, including management of advanced cybersecurity tools for continuous monitoring (CONMON).
• Manage vulnerability remediation and ensure continuous compliance.
• User Security Awareness: Ensure system users are trained and briefed on security awareness policies before being granted system access.
• Collaborate and Secure: Work with DCSA, ITPSO, ISSM, and the site Facility Security Officer (FSO) to ensure continuous compliance.