Senior Information Assurance & Cyber Risk Lead (TS)

ValidaTek, Inc.; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

ValidaTek, Inc. in Washington, DC is seeking a Senior Information Assurance Specialist with a Top Secret clearance to lead cybersecurity and information assurance across federal programs.

You will develop, implement, and evaluate security controls, policies, and RMF processes to protect critical systems and data. The role requires hands-on RMF support, risk assessments, authorization packages, and collaboration with government stakeholders.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, IT, CS, or related discipline.
• Minimum of eight (8) years of relevant information assurance or cybersecurity experience.
• Active Top Secret (TS) security clearance required.
• Experience implementing RMF and federal security controls.

Responsibilities

• Develop, implement, and maintain information assurance policies and security controls.
• Conduct risk assessments, vulnerability assessments, and security compliance reviews.
• Support RMF activities including security categorization, control selection, assessment, and continuous monitoring.
• Develop and maintain ATO packages, SSPs, POA&Ms, SARs, and related artifacts.
• Collaborate with government stakeholders and engineers to ensure security requirements are met.
• Provide guidance on cybersecurity technologies, tools, and architecture improvements.

Skills

Information Assurance

Cybersecurity

RMF (Risk Management Framework)

NIST SP 800-53/37/30

Security Policy Development

Security Documentation

Analytical Thinking

Education

Bachelor's degree in Cybersecurity / IT or related field

Tools

Vulnerability Scanning Tools

Security Monitoring Platforms

STIGs / DISA Tools

Job description

ValidaTek, Inc. in Washington, DC is seeking a Senior Information Assurance Specialist with a Top Secret clearance to lead cybersecurity and information assurance across federal programs.

You will develop, implement, and evaluate security controls, policies, and RMF processes to protect critical systems and data. The role requires hands-on RMF support, risk assessments, authorization packages, and collaboration with government stakeholders.