Senior Cybersecurity Internal Controls Administrator (Information Assurance Engineer - Senior)

CGI Group, Inc. is seeking a Senior Cybersecurity Internal Controls Administrator to support RMF and eMASS services under the Army PL ALTESS contract in Radford, VA. This onsite role focuses on RMF package development, artifact generation under DoD guidance, remediation coordination, and testing of Continuity of Operations and Incident Response processes. Compensation for this role ranges from USD 127,500 to 251,100 per year.

Responsibilities

• Provide comprehensive support in accordance with DoDI 8500.01, DoDI 8510.01, and AR 25-2.
• Deliver Enterprise eMASS and RMF services, including developing RMF packages, maintaining asset lists and categorizations, and scheduling and coordinating system validation reviews.
• Generate artifacts to support control compliance.
• Review ACAS and STIG reports, and coordinate remediation efforts.
• Create, track, and maintain Plan of Action Milestones (POA&M).
• Perform annual security reviews.
• Participate in Continuity of Operations (COOP) and Incident Response testing.
• Maintain Army PPSM and Circuit Registry records.
• Participate in SW Assurance reviews to ensure ongoing items are appropriately documented via eMASS POA&M.

Your Future Duties and Responsibilities

• The Senior Cybersecurity Internal Controls Administrator will provide comprehensive support in accordance with DoDI 8500.01, DoDI 8510.01, and AR 25-2.
• The role involves providing Enterprise eMASS and RMF services, including developing RMF packages, maintaining asset lists and categorizations, and scheduling and coordinating system validation reviews.
• The administrator will generate artifacts to support control compliance, review ACAS and STIG reports, and coordinate remediation efforts.
• Additionally, the role includes creating, tracking, and maintaining Plan of Action Milestones (POA&M), performing annual security reviews, participating in COOP and Incident Response testing, and maintaining Army PPSM and Circuit Registry records.
• The administrator will also participate in SW Assurance reviews to ensure ongoing items are appropriately documented via eMASS POA&M.

Required Qualifications to Be Successful in This Role

• a) Cybersecurity Certification (such as CISSP/etc.)
• b) Active DoD Secret Security Clearance
• c) 10 or more years of experience in Cybersecurity and RMF related areas
• d) Extensive experience with Enterprise eMASS and RMF services
• e) Proficiency in developing RMF packages and maintaining asset lists and categorizations
• f) Ability to schedule and coordinate system validation reviews
• g) Experience generating artifacts to support control compliance
• h) Knowledge of ACAS and STIG reports and coordinating remediation efforts
• i) Experience creating, tracking, and maintaining POAMs
• j) Ability to perform annual security reviews
• k) Participation in COOP and Incident Response testing
• l) Ability to maintain Army PPSM and Circuit Registry records
• m) Participation in SW Assurance reviews and documenting items via eMASS POA&M

Desired Qualifications

• a) Bachelor's degree in Computer Science or equivalent years of experience
• b) Familiarity with DoDI 8500.01, DoDI 8510.01, and AR 25-2
• c) Strong analytical and problem-solving skills
• d) Excellent communication and coordination skills
• e) Experience with Army enterprise monitoring tools and practices
• f) Knowledge of security regulations and best industry practices
• g) Ability to work effectively in a team environment and collaborate with various stakeholders
• h) Experience with incident response activities
• i) Understanding of Continuity of Operations Plans and Communication Plans

Skills

• Cyb.Sec.Eng. (Sensor /Device)

Technologies

• eMASS
• RMF
• ACAS
• STIG

Benefits

• Competitive compensation
• Comprehensive insurance options
• Matching contributions through the 401(k) plan and the share purchase plan
• Paid time off for vacation, holidays, and sick time
• Paid parental leave
• Learning opportunities and tuition assistance
• Wellness and Well-being programs