VNC Senior Cyber Security ISSO

About this role

Responsibilities

• Provides subject matter expertise to the Information Systems Security Manager (ISSM), Program Management Leadership, and technical teams developing/sustaining systems ensuring compliance with NIST and DoD Instruction 8500.01
• Leads Assessment and Authorization (A&A) activities under the Risk Management Framework (RMF) for VoIP, VTC, and IP surveillance systems
• Manage and sustain the Risk Management Framework (RMF) package(s) in order to maintain an Authority to Operate (ATO) including ensuring the established security control baseline, control statements, and supporting evidence have been entered or uploaded into the Enterprise Mission Assurance Support Service (eMASS)
• Review security controls, security technical implementation guides (STIGs), vulnerability scans, engineering change proposals, evaluate the impacts to cybersecurity posture, and the effectiveness of proposed solutions
• Create and manage the systems profile in the Assured Compliance Assessment Solution (ACAS) tool, ensuring that monthly vulnerability scan results are uploaded