Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements

Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance

Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates

Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls

Reviewing risk and control matrices and testing plans for key controls and determines effectiveness

Identifying control gaps, reviewing and testing the design of existing controls.

Formulating clear and concise conclusions on internal controls and business process efficiency

Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data

Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs

Reviewing Plans of Actions & Milestones (POA&Ms)

Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO)

Reviewing network and systems design to ensure accuracy

Senior Security Control Assessor Representative (SCAR)

Responsibilities

Qualification

Required

Preferred

Company

Darkwolf Solutions

More roles at Darkwolf Solutions