Information Security Risk Specialist - (Secret Clearance)

Craig-Technologies; Saint Inigoes Shores (MD); Sur place; USD 90 000 - 130 000; Plein temps

Résumé du poste

Craig Technologies is seeking an Information Security Risk Specialist to help our DoD customers discover cyber risks, understand applicable policies, and develop mitigation plans. You will gather technical details from SMEs to assess the threat landscape and guide clients through a plan of action with presentations and milestones.

You will learn to translate complex security concepts for informed decision-making and secure critical systems in a structured, compliance-driven environment.

Qualifications

• 3+ years leading and executing Navy RMF across all steps.
• Experience with eMASS/ACAS, scan results, and inventories.
• Experience reviewing and enforcing STIGs with STIG Viewer.
• Experience developing SAPs and SARs aligned with Navy RMF.
• Knowledge of PPSM and structured, compliant cybersecurity processes.
• DoD 8140 or 752-Cyber policy certification.

Responsabilités

• Assist military leaders in identifying cyber risks and mitigation plans.
• Gather technical and personnel details for threat landscape assessment.
• Guide clients through action plans with presentations and milestones.

Connaissances

RMF Lifecycle

Navy SOPs

POA&M

eMASS

ACAS

STIGs

SAP & SAR

PPSM

Compliance

DoD 8140/752-Cyber

Formation

Bachelora0s degree in Cybersecurity/IT/CS/IS/Data Science/SE

Master7s degree

Outils

eMASS

ACAS

STIG Viewer

Description du poste

Title: Information Security Risk Specialist - (SECRET CLEARANCE)

Location: St Inigoes, Maryland

Clearance: Active Secret (with ability to obtain a Top Secret Clearance)

Citizenship requirement: Yes

Req #: 4112

Salary: Depending on Experience

Job Title: Information Security Risk Specialist

Craig Technologies is in support of service on the forefront of our nation’s security. Our mission, as a Woman/Minority/Disabled-Vet Owned Small DoD Subcontractor, is cutting edge and composed of teams that support in maintaining the security of our nation. We are looking for talented and motivated individuals who have the drive to be a part of the overall "It's all about the mission..." goal and join the race to be leaders in this dynamic environment!

As an information security risk specialist on our team, you’ll assist military leaders with discovering their cyber risks, understanding applicable policies, and developing a mitigation plan. You’ll gather technical and personnel details from subject matter experts to help with the assessment of the entire threat landscape. You’ll learn how to guide your client through a plan of action with presentations, white papers, and milestones, and help to translate security concepts so they can make the best decisions to secure their critical systems.

Required Skills

• 3+ years of experience leading and executing Navy Risk Management Framework (RMF), including full lifecycle implementation across all RMF steps, application of Navy SOPs and cybersecurity directives, and ownership of Plans of Action and Milestones (POA&Ms)
• Experience with eMASS and ACAS, including analysis and prioritization of scan results, development and maintenance of hardware and software inventories, and vulnerability management using SCAP, VRAM and HBSS
• Experience reviewing, interpreting, and enforcing Security Technical Implementation Guides (STIGs) using STIG Viewer
• Experience developing and supporting Security Assessment Plans (SAPs) and Security Assessment Reports (SARs) in alignment with Navy RMF requirements
• Knowledge of Ports, Protocols, and Services Management (PPSM)
• Ability to operate in a structured and compliance-driven environment while executing established cybersecurity processes with minimal supervision
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Science, or Software Engineering
• DoD 8140 or 752-Cyber Policy and Strategy Planner Certification

Additional Eligibility Qualifications

• Master’s degree

Craig Technologies is an EEO Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other non-job-related protected status. All candidates selected will be subject to a security background investigation and must meet all eligibility requirements for access to classified information.

All candidates selected will be subject to a security background investigation and must meet all eligibility requirements for access to classified information.