Provide support to the MARAD Information Assurance Program for operations, business and administrative in support of the System Authorization Process and deliverables as defined in this document.
Direct involvement with MARAD Program Office and the Information System Security Manager (ISSM) on cybersecurity and authority to operate (ATO) matters related to information systems supporting the MARAD CIO.
Manage MARAD’s Information System’s core documentation, in accordance with each phase of the system engineering process / System Development Life Cycle (SDLC) with standardized templates, baseline management with supporting checklists and technical guides.
Support creation/update of FIPS 199 Security Categorization document.
Support creation/update security control selection listing (include justification for applicable tailor and or risk acceptance).
Support creation/update System Security Plan (SSP); ensure discovered and identified system components, control implementation status are addressed.
Assist in security incident response, risk mitigation, and compliance reporting.
Performs other job-related duties as assigned.

Requirements

10+ years of experience in cybersecurity, with expertise in maritime/vessel cybersecurity, IT/OT security, and federal cybersecurity policies.
Strong knowledge of NIST RMF, NIST Cybersecurity Framework (CSF), FISMA, and Navy or U.S. Coast Guard Maritime Organization cybersecurity requirements.
Experience with Continuous Diagnostics and Mitigation (CDM), Information Security Continuous Monitoring (ISCM), and Identity, Credential, and Access Management (ICAM).
Proven ability to lead cybersecurity assessments, compliance audits, and risk management activities.
Understanding of the principles, methods, and tools of quality assurance and quality control used to ensure a product fulfills functional requirements and standards.
Proficiency in Microsoft Office Suite, Power BI, Tableau, and SharePoint.
Must pass pre-employment qualifications of Cherokee Federal.

Benefits

Medical
Dental
Vision
401K
other possible benefits as provided
Benefits are subject to change with or without notice.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecuritymaritime cybersecurityIT/OT securityNIST RMFNIST Cybersecurity FrameworkFISMAContinuous Diagnostics and MitigationInformation Security Continuous MonitoringIdentity Credential and Access Managementrisk management

Soft Skills

leadershipcompliance auditingrisk mitigationincident responsequality assurancequality control