Information Security Risk Specialist — Active Secret, TS Eligible

Craig-Technologies; Saint Inigoes Shores (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

Craig Technologies is seeking an Information Security Risk Specialist to help our DoD customers discover cyber risks, understand applicable policies, and develop mitigation plans. You will gather technical details from SMEs to assess the threat landscape and guide clients through a plan of action with presentations and milestones.

You will learn to translate complex security concepts for informed decision-making and secure critical systems in a structured, compliance-driven environment.

Qualifications

• 3+ years leading and executing Navy RMF across all steps.
• Experience with eMASS/ACAS, scan results, and inventories.
• Experience reviewing and enforcing STIGs with STIG Viewer.
• Experience developing SAPs and SARs aligned with Navy RMF.
• Knowledge of PPSM and structured, compliant cybersecurity processes.
• DoD 8140 or 752-Cyber policy certification.

Responsibilities

• Assist military leaders in identifying cyber risks and mitigation plans.
• Gather technical and personnel details for threat landscape assessment.
• Guide clients through action plans with presentations and milestones.

Skills

RMF Lifecycle

Navy SOPs

POA&M

eMASS

ACAS

STIGs

SAP & SAR

PPSM

Compliance

DoD 8140/752-Cyber

Education

Bachelora0s degree in Cybersecurity/IT/CS/IS/Data Science/SE

Master7s degree

Tools

eMASS

ACAS

STIG Viewer

Job description

Craig Technologies is seeking an Information Security Risk Specialist to help our DoD customers discover cyber risks, understand applicable policies, and develop mitigation plans. You will gather technical details from SMEs to assess the threat landscape and guide clients through a plan of action with presentations and milestones.

You will learn to translate complex security concepts for informed decision-making and secure critical systems in a structured, compliance-driven environment.