Senior Archer GRC Administrator

tharros; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

Tharros is seeking a Senior Archer GRC Administrator to configure, operate, and maintain the RSA Archer GRC platform supporting DHS security authorization and risk management. You will own the platform from server and database through the security controls catalog, workflows, and leadership dashboards, and train users across the enterprise.

This position is on-site in a Government SCIF in Washington, DC. Responsibilities include patching, upgrades, dashboard development, user training within 3

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science, OR minimum of 10 years' IT/cybersecurity experience.
• Minimum of 7 years' IT/cybersecurity experience, including hands-on RSA Archer administration.
• Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
• Knowledge of RSA Archer architecture, application builder, workflow, data feeds, and reporting.
• Knowledge of NIST SP 800-53 and CNSSI 1253 security control structures.
• Knowledge of the RMF authorization workflow.
• Skill in configuring GRC applications, workflows, and dashboards.
• Skill in patching and upgrading enterprise applications.
• Ability to train users of varying technical backgrounds.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• RSA Archer Certified Administrator or another professional GRC certification.

Responsibilities

• Configure, operate, and maintain the Archer GRC software toolset.
• Install vendor patches; test and install updated versions of the GRC software.
• Maintain the GRC server platform and manage the GRC database.
• Configure, populate, and maintain the Security Controls Catalog (DHS 4300C, NIST SP 800-53, CNSSI 1253, IC overlays).
• Tailor the tool for new use cases as requested by the Government.
• Develop compliance dashboards for CSD leadership and system owners.
• Set up and manage user accounts; train Government and contractor users within 3 business days of request.
• Develop and maintain GRC SOPs and training documentation.

Skills

Training users

Documentation

Communication

Education

Bachelor's degree in Information Technology, Cybersecurity, Information Systems, or Computer Science

Tools

RSA Archer

MS Office Suite (Teams)

Job description

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise.

In support of this mission, we have an immediate opportunity for a Senior Archer GRC Administrator. In this role you will configure, operate, and maintain the RSA Archer governance, risk, and compliance (GRC) platform that supports DHS security authorization and risk management. You will own the platform from server and database through the security controls catalog, workflows, and leadership dashboards, and train users across the enterprise. This position is on-site in a Government SCIF in Washington, DC.

Responsibilities:

• Configure, operate, and maintain the Archer GRC software toolset.
• Install vendor patches; test and install updated versions of the GRC software.
• Maintain the GRC server platform and manage the GRC database.
• Configure, populate, and maintain the Security Controls Catalog (DHS 4300C, NIST SP 800-53, CNSSI 1253, IC overlays).
• Tailor the tool for new use cases as requested by the Government.
• Develop compliance dashboards for CSD leadership and system owners.
• Set up and manage user accounts; train Government and contractor users within 3 business days of request.
• Develop and maintain GRC SOPs and training documentation.

Requirements:

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 10 years' experience in IT or cybersecurity.
• Minimum of 7 years' IT or cybersecurity experience, including hands-on RSA Archer administration.
• Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
• Knowledge of RSA Archer architecture, application builder, workflow, data feeds, and reporting.
• Knowledge of NIST SP 800-53 and CNSSI 1253 security control structures.
• Knowledge of the Risk Management Framework (RMF) authorization workflow.
• Skill in configuring GRC applications, workflows, and dashboards.
• Skill in patching and upgrading enterprise applications.
• Ability to train users of varying technical backgrounds.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.
• RSA Archer Certified Administrator or another professional GRC certification.