Sr Cybersecurity Compliance Specialist

Bering-Alaka'ina Holdings, LLC; Arlington (VA); Presencial; USD 118.000 - 133.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401K with company match

Medical, dental, disability, and life

Tuition reimbursement

Paid time off and holidays

Descripción de la vacante

Bering-Alaka'ina Holdings, LLC is seeking a Sr Cybersecurity Compliance Specialist to support our government customer in Arlington, VA. This on-site role focuses on enforcing FISMA and RMF compliance, performing vulnerability scans, and sustaining ATO packages within eMASS.

The candidate will lead security documentation, risk assessments, and security training programs. Requirements include a BS in CS or related field (4–7 years in cybersecurity acceptable) and IAM Level II certification with

Formación

• Advanced, specialized knowledge of the DoD RMF, NIST directives, and Army security regulations.
• Ability to independently develop complex technical cybersecurity documentation, risk assessments, and executive-level presentations.
• Must have attained high-level eMASS experience within the last 2-3 years.

Responsabilidades

• Enforce and validate regulatory compliance for FISMA, DoDI 8510.01 (RMF), PPSM, and the DoD Cyber Scorecard.
• Conduct advanced vulnerability scanning analysis and IT personnel security audits.
• Provide technical support for incident response (including classified spillage containment) and deliver localized cybersecurity awareness training.
• Routinely serve on the Compliance Team as the Organizational Information System Security Manager (O-ISSM) and be familiar with SSPs, POA&Ms, and ATO packages.
• Review system security packages for completeness and author required ATO documents (SSP, RAR, and POAMs).
• Continually scan for security gaps and report findings to the Cybersecurity Compliance Lead.
• Run STIGs scans and produce POAMs for any system with rule interruptions; maintain POAMs.
• Have senior-level eMASS experience for ATO packages; evaluate SSPs, POA&Ms, and RARs for accuracy and timeliness.
• Contribute to timely production of deliverables and participate in COOP/Alternative site activities.

Descripción del empleo

Bering-Alaka'ina Holdings, LLC is looking for a Sr Cybersecurity Compliance Specialist to support our government customer located in Arlington, Virginia.

This position is 100% on-site.

DESCRIPTION OF RESPONSIBILITIES:

Core responsibilities involve executing continuous system auditing within eMASS, distributing compliance tasks among stakeholders, and aggressively supporting ATO sustainment efforts. Key duties include enforcing and validating regulatory compliance for FISMA, DoDI 8510.01 (RMF), PPSM, and the DoD Cyber Scorecard. Furthermore, the Senior Specialist shall conduct advanced vulnerability scanning analysis, perform IT personnel security audits, provide technical support for incident response (including classified spillage containment), and deliver localized cybersecurity awareness training.

REQUIRED DEGREE/EDUCATION/CERTIFICATION:

• Bachelor of Science in Computer Science or related field or 4-7 years of experience in the cybersecurity field.
• Required to be certified IAM Level II, IAW AR 25-2 and DA Pam 25-2-6 at time of onboarding.
• Satisfy all mandatory DoD 8140.03 / DCWF certification requirements.

KEY DUTIES:

• Key duties include enforcing and validating regulatory compliance for FISMA, DoDI 8510.01 (RMF), PPSM, and the DoD Cyber Scorecard.
• Shall conduct advanced vulnerability scanning analysis, perform IT personnel security audits, provide technical support for incident response (including classified spillage containment), and deliver localized cybersecurity awareness training.
• Routinely serves on the Compliance Team as the Organizational Information System Security Manager (O-ISSM) and must be familiar with typical ISSM/ISSO tasks such as System Security Plans (SSPs), Plans of Actions & Milestones (POA&Ms), Authority to Operate (ATO) packages for government approval, etc.
• Shall review system security packages for completeness and author required ATO package documents, including the SSP, Risk Assessment Report (RAR), and PO&AMs as needed.
• Shall continually scan the system for security gaps and provide reports to the Cybersecurity Compliance Lead.
• Shall identify and clearly communicate, in verbal and written form, the status, strengths, vulnerabilities, and risks of all systems and applications within the area of responsibility to the Cybersecurity Compliance Lead and Program Manager as needed.
• Shall run Security Technical Implementation Guides (STIGs) scans and report any findings to the Cybersecurity Compliance Lead.
  • Produce a comprehensive POAM for any system incompatible rules due to the interruption of system functions or application features.
  • Maintain POAMs and ensure they are updated at all times.
• Shall have senior level working experience using eMASS as the repository and workflow for ATO security packages.
  • Must evaluate and/or author SSPs, POA&Ms, and RARs for accuracy, compliance with security policies, completeness, and timeliness.
  • Shall review eMASS records and make recommendations regarding security and compliance gaps.
• At the direction of the Cybersecurity Compliance Lead and Program Manager, contribute to the timely and accurate production and submission of required deliverables.
• Participate in COOP / Alternative site faculties activities as needed

REQUIRED SKILLS AND EXPERIENCE:

• Advanced, specialized knowledge of the DoD RMF, NIST directives, and Army security regulations.
• Ability to independently develop complex technical cybersecurity documentation, risk assessments, and executive-level presentations.
• Must have attained high-level eMASS experience within the last 2-3 years.

REQUIRED CITIZENSHIP AND CLEARANCE:

• U. S. Citizenship required.
• Must have and maintain an active Top Secret clearance.

COMPENSATION DETAILS:

• $117,835 - $133,205
• The compensation range or hourly rate provided is a good faith estimate at the time of posting. Final compensation will be determined based on qualifications, experience, skills, internal equity, market conditions, and applicable laws.

Bering-Alaka`ina Holdings, LLC is a fast-growing government service provider. Employees enjoy competitive salaries. Eligible employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage; tuition reimbursement; paid time off; and 11 paid holidays.

We are an Equal Opportunity/Affirmative Action Employer of individuals with disabilities and veterans. We are proud to state that we do not illegally discriminate in employment decisions on the basis of any protected categories. If you are a person with a disability and you need an accommodation during the application process, please click here to request accommodation. We E-Verify all employees

As a part of BSNC, Bering- Alakaina Holdings gives hiring, promotion, training, and retention preference to BSNC shareholders, descendants and shareholder spouses who meet the minimum qualifications for the job. Qualified job candidates will generally be considered in the following order: BSNC shareholders, descendants, shareholder spouses, current employees, and outside candidates. The BSNC Shareholder Development department tracks and monitors the implementation of the Shareholder Hire Preference across its operations.

Bering-Alaka`ina Holdings, LLC is comprised of industry-recognized government service firms designated as Alaska Native Corporation (ACN)-owned and 8(a) certified businesses and includes Ke`aki Technologies, LLC; Laulima Government Solutions, LLC; Kūpono Government Services, LLC; Kapili Services, LLC; Po`okela Solutions, LLC; Kīkaha Solutions, LLC;and Pololei Solutions, LLC.

For additional information, please visit https://www.beringalakaina.com

#LI-JS1

#ClearanceJobs