Information Assurance / Cyber Security Analyst

Your tasks

• Develop and maintain Authorization to Operate (ATO) packages in collaboration with system owners and relevant stakeholders.
• Conduct Assessment Procedure (AP) testing and evaluations to assess the implementation and effectiveness of security controls.
• Review and contribute to security control implementation statements, ensuring they align with applicable authorization requirements.
• Work with system teams to review, update, and create Plans of Action and Milestones (POA&Ms), supporting the resolution of identified security and compliance gaps.
• Guide system teams in navigating the Enterprise Mission Assurance Support Service (eMASS) governance, risk, and compliance tool.
• Support system authorization processes, security artifact development, control implementation documentation, and POA&M management.
• Provide guidance throughout each stage of the Risk Management Framework (RMF) process and associated eMASS workflows.
• Analyze and develop authorization documents, policies, standard operating procedures (SOPs), POA&Ms, and related artifacts to identify gaps and establish remediation schedules.
• Coordinate directly with system stakeholders to address outstanding authorization requirements and execute activities in accordance with established procedures.
• Review and develop security artifacts that meet Department of Defense (DoD) authorization and compliance requirements, mapping documentation to applicable NIST SP 800-53 controls.
• Communicate authorization requirements and technical security findings clearly to staff, system teams, and leadership.
• Facilitate stakeholder meetings, maintain client relationships, and coordinate activities needed to advance authorization and compliance efforts.

Requirements

• Bachelor's degree in a STEM discipline or a related field.
• At least 10 years of recent experience performing information assurance, cybersecurity, authorization, and compliance responsibilities relevant to this position.
• Demonstrated experience with Authorization to Operate (ATO) and Interim Authorization to Operate (IATO) processes, the Risk Management Framework (RMF), and NIST SP 800-53 Revision 4.
• Familiarity with SAP financial systems, STIG Viewer, federal IT and cloud security policies, and the eMASS governance, risk, and compliance platform.
• Experience with Platform as a Service (PaaS), Software as a Service (SaaS), and Infrastructure as a Service (IaaS) environments, as well as FedRAMP and AWS GovCloud.
• Understanding of network and server topologies, configurations, security controls, and authorization documentation requirements.
• Active professional certification in at least one of the following: CISSP, CISA, CAP, CISM, or CRISC.
• U.S. citizenship and an active Secret security clearance are mandatory.
• Ability to work remotely while attending periodic on-site meetings at Picatinny Arsenal, New Jersey.
• Strong analytical and documentation skills, with the ability to identify compliance gaps, evaluate security requirements, and develop actionable remediation plans.
• Effective communication and stakeholder management skills, including the ability to explain technical authorization requirements to audiences with varying levels of technical expertise.
• Ability to coordinate multiple activities, facilitate meetings, and collaborate with system owners and technical teams to achieve authorization milestones.

What we offer

• Salary range: $125,000–$130,000 per year.
• Work arrangement: Remote, with periodic on-site meetings at Picatinny Arsenal, New Jersey.
• Professional scope: Opportunity to contribute to federal cybersecurity, information assurance, and authorization initiatives.
• Healthcare coverage, retirement plans, paid time off, and other employee benefits were not specified in the provided job description.

How to apply

How Jobgether works We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Other

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.