Senior Cybersecurity Internal Controls Administrator - Remote (Active Secret Clearance Required)

Empower AI; Radford (VA); Remote; USD 87,000 - 135,000; Full time

Job summary

Empower AI is seeking a Senior Cybersecurity Internal Controls Administrator for remote work with DoD RMF responsibilities. You will deliver eMASS and RMF services, maintain asset lists, and coordinate system validation reviews while ensuring compliance across Army IT environments.

The role requires an active DoD Secret clearance and 10+ years in cybersecurity/RMF, with strong DoD governance knowledge and incident response involvement.

Qualifications

• Cybersecurity Certification (e.g., CISSP or equivalent) is required.
• Bachelor's degree preferred; equivalent cybersecurity and RMF experience considered in lieu of a degree.
• Active DoD Secret Security Clearance is required.
• 10+ years of cybersecurity and RMF experience.
• Extensive experience with Enterprise eMASS and RMF services.
• Ability to develop RMF packages and maintain asset lists and categorizations.
• Experience with ACAS and STIG reports and remediation coordination.
• Experience creating, tracking, and maintaining POA&M documentation.

Responsibilities

• Provide Enterprise eMASS and RMF services and develop RMF packages.
• Schedule and coordinate system validation reviews.
• Generate artifacts to support control compliance and review ACAS/STIG reports.
• Create, track, and maintain POA&M documentation.
• Perform annual security reviews and support COOP and Incident Response testing.
• Maintain Army PPSM and Circuit Registry records.
• Participate in Software Assurance reviews and document items via eMASS POA&M.

Skills

RMF

eMASS

Cybersecurity

DoD compliance

ACAS

STIG

POA&M

CISSP

DoDI 8510.01

AR 25-2

Education

Bachelor's degree in Computer Science

Equivalent cybersecurity and RMF experience

Tools

eMASS

ACAS

STIG

POA&M tracking tool

Army PPSM

Job description

Senior Cybersecurity Internal Controls Administrator - Remote (Active Secret Clearance Required)

Job Locations: US-VA-Radford | US-Remote

Type: Regular Full-Time

Overview

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai.

Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company's commitment to hiring and supporting active-duty and veteran employees.

Responsibilities

The Senior Cybersecurity Internal Controls Administrator provides comprehensive support in accordance with DoDI 8500.01, DoDI 8510.01, and AR 25-2, delivering Enterprise eMASS and Risk Management Framework (RMF) services, including developing RMF packages, maintaining asset lists and categorizations, and scheduling and coordinating system validation reviews.

This is a remote-eligible position. Local candidates in the Roanoke and Radford, Virginia area are encouraged to apply, and work may be performed locally for those who prefer an on-site or hybrid arrangement. The ideal candidate will bring deep RMF and eMASS compliance expertise, strong DoD cybersecurity compliance knowledge, and the ability to support mission-critical Army IT services across enterprise data centers and cloud-hosted environments.

Key Responsibilities

• Provide Enterprise eMASS and RMF services, including developing RMF packages and maintaining asset lists and categorizations.
• Schedule and coordinate system validation reviews.
• Generate artifacts to support control compliance; review ACAS and STIG reports and coordinate remediation efforts.
• Create, track, and maintain Plan of Action and Milestones (POA&M) documentation.
• Perform annual security reviews and participate in Continuity of Operations (COOP) and Incident Response testing.
• Maintain Army PPSM and Circuit Registry records.
• Participate in Software Assurance reviews to ensure ongoing items are appropriately documented via eMASS POA&M.

Qualifications

Requirements

• Cybersecurity Certification (such as CISSP or equivalent).
• Bachelor's degree in Computer Science is preferred; equivalent years of cybersecurity and RMF experience will be considered in lieu of a degree.
• Active DoD Secret Security Clearance.
• 10 or more years' experience with Cybersecurity and RMF-related areas.
• Extensive experience with Enterprise eMASS and RMF services.
• Proficiency in developing RMF packages and maintaining asset lists and categorizations.
• Ability to schedule and coordinate system validation reviews.
• Experience generating artifacts to support control compliance.
• Knowledge of ACAS and STIG reports and coordinating remediation efforts.
• Experience creating, tracking, and maintaining Plan of Action and Milestones (POA&M).
• Ability to perform annual security reviews.
• Participation in Continuity of Operations (COOP) and Incident Response testing.
• Ability to maintain Army PPSM and Circuit Registry records.
• Participation in Software Assurance reviews and documenting items via eMASS POA&M.
• Experience with security compliance and control documentation.

Preferred

• Bachelor's degree in Computer Science or equivalent years of experience.
• Familiarity with DoDI 8500.01, DoDI 8510.01, and AR 25-2.
• Strong analytical and problem-solving skills.
• Excellent communication and coordination skills.
• Experience with Army enterprise monitoring tools and practices.
• Knowledge of security regulations and best industry practices.
• Ability to work effectively in a team environment and collaborate with various stakeholders.
• Experience with incident response activities.
• Understanding of Continuity of Operations Plans and Communication Plans.

Certifications

• CISSP or equivalent Cybersecurity Certification

About Empower AI

All hiring and promotion decisions at Empower AI are based on merit to bring the best talent available to contribute to our firm's overall success. It is the policy of Empower AI not to discriminate against any applicant for employment, or employee because of age, color, sex, disability, national origin, race, religion, or veteran status. Empower AI is a VEVRAA Federal Contractor.

If hired for this position, the base salary range would be within the range provided. The base salary range represents the anticipated low and high end of the salary range for this position. Actual salaries may vary based on various factors including but not limited to work location, skills, experience, gov con contractual requirements, and performance. The range listed is just one component of Empower AI's total compensation package for employees.

Pay Band Min

USD $87,320.00/Yr.

Pay Band Max

USD $135,160.00/Yr.