Information Assurance Specialist – III (Information Security Analyst)

Barbaricum; Indianapolis (IN); On-site; USD 90,000 - 120,000; Full time

Job summary

Barbaricum is seeking an experienced Information Assurance Specialist III (Information Security Analyst) to support cybersecurity compliance and risk management activities for DoD systems. The selected candidate will work closely with engineers and cybersecurity teams to ensure compliance with federal and DoD cybersecurity standards.

Key responsibilities include assessing cybersecurity controls, supporting the Security Assessment and Authorization process, and developing accreditation documentation. A Bachelor's degree and 10 years of experience in information security are required.

Qualifications

• Minimum 10 years of experience in network operations and information security.
• Demonstrated experience assessing security controls based on cybersecurity principles.
• In-depth understanding of NIST Security Controls relevant to the SA&A process.
• Hands-on experience in writing A&A documentation packages for system authorizations.

Responsibilities

• Assess and implement cybersecurity controls in accordance with NIST standards.
• Support the Security Assessment and Authorization process by evaluating controls.
• Develop and maintain documentation packages for system accreditation.
• Conduct security assessments and compliance reviews for systems.
• Collaborate with teams to implement security controls and maintain compliance.
• Provide guidance on information assurance and regulatory compliance.

Skills

Network operations

Information security

Cybersecurity compliance

Risk management

Assessment and authorization documentation

Education

Bachelor’s degree in a related field

Tools

NIST SP 800-53

NIST Cybersecurity Framework

Job description

Information Assurance Specialist – III (Information Security Analyst)

Barbaricum is seeking an experienced Information Assurance Specialist III (Information Security Analyst) to support cybersecurity compliance, risk management, and authorization activities for Department of Defense (DoD) systems. The selected candidate will assess security controls, support Security Assessment and Authorization (SA&A) efforts, and develop accreditation documentation to ensure compliance with federal and DoD cybersecurity requirements.

The Information Assurance Specialist will work closely with system owners, engineers, and cybersecurity teams to evaluate system security, support continuous monitoring activities, and maintain compliance with the Risk Management Framework (RMF), NIST standards, and applicable government regulations.

Responsibilities

• Assess, implement, and validate cybersecurity controls in accordance with NIST SP 800‑53, the NIST Cybersecurity Framework, and applicable DoD cybersecurity requirements.
• Support the Security Assessment and Authorization (SA&A) process by evaluating security controls, identifying risks, and recommending mitigation strategies.
• Develop, review, and maintain Assessment and Authorization (A&A) documentation packages to support system accreditation and authorization efforts.
• Conduct security assessments, vulnerability analyses, and compliance reviews to ensure systems meet federal and DoD cybersecurity standards.
• Collaborate with system owners, engineers, and cybersecurity teams to implement security controls and maintain a strong security posture across enterprise environments.
• Support continuous monitoring activities, including risk assessments, control validation, remediation tracking, and reporting.
• Provide cybersecurity guidance and recommendations related to information assurance, risk management, and regulatory compliance.
• Prepare technical reports, security documentation, and executive briefings to support authorization decisions and stakeholder requirements.
• Ensure compliance with Risk Management Framework (RMF), DoD policies, and applicable government cybersecurity regulations.
• Serve as a subject matter expert on information assurance, cybersecurity controls, accreditation processes, and security compliance initiatives.

Required Qualifications

• Bachelor’s degree in a related field.
• Minimum 10 years of experience in network operations and information security.
• Demonstrated experience assessing security controls based on cybersecurity principles and tenets (e.g., NIST SP 800‑53, Cybersecurity Framework, etc.).
• In‑depth understanding of the relevance of NIST Security Controls and Control Implementation methodologies to the SA&A process.
• Relevant DoD, DHS or .gov Cyber Security Information Assurance focused experience with specific current hands‑on researching, writing, and submitting complete A&A documentation packages for new system authorizations.

EEO Commitment

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.