Senior Cybersecurity Internal Controls Administrator

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai.

Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active-duty and veteran employees.

The Senior Cybersecurity Internal Controls Administrator provides comprehensive support in accordance with DoDI 8500.01, DoDI 8510.01, and AR 25-2, delivering Enterprise eMASS and Risk Management Framework (RMF) services, including developing RMF packages, maintaining asset lists and categorizations, and scheduling and coordinating system validation reviews.

This is a remote-eligible position. Local candidates in the Roanoke and Radford, Virginia area are encouraged to apply, and work may be performed locally for those who prefer an on-site or hybrid arrangement. The ideal candidate will bring deep RMF and eMASS compliance expertise, strong DoD cybersecurity compliance knowledge, and the ability to support mission-critical Army IT services across enterprise data centers and cloud-hosted environments.

Key Responsibilities

• Provide Enterprise eMASS and RMF services, including developing RMF packages and maintaining asset lists and categorizations.
• Schedule and coordinate system validation reviews.
• Generate artifacts to support control compliance; review ACAS and STIG reports and coordinate remediation efforts.
• Create, track, and maintain Plan of Action and Milestones (POA&M) documentation.
• Perform annual security reviews and participate in Continuity of Operations (COOP) and Incident Response testing.
• Maintain Army PPSM and Circuit Registry records.
• Participate in Software Assurance reviews to ensure ongoing items are appropriately documented via eMASS POA&M.

Requirements:

• Cybersecurity Certification (such as CISSP or equivalent).
• Bachelor's degree in Computer Science is preferred; equivalent years of cybersecurity and RMF experience will be considered in lieu of a degree.
• Active DoD Secret Security Clearance.
• 10 or more years' experience with Cybersecurity and RMF-related areas.
• Extensive experience with Enterprise eMASS and RMF services.
• Proficiency in developing RMF packages and maintaining asset lists and categorizations.
• Ability to schedule and coordinate system validation reviews.
• Experience generating artifacts to support control compliance.
• Knowledge of ACAS and STIG reports and coordinating remediation efforts.
• Experience creating, tracking, and maintaining Plan of Action and Milestones (POA&M).
• Ability to perform annual security reviews.
• Participation in Continuity of Operations (COOP) and Incident Response testing.
• Ability to maintain Army PPSM and Circuit Registry records.
• Participation in Software Assurance reviews and documenting items via eMASS POA&M.
• Experience with security compliance and control documentation.

Preferred:

• Bachelor's degree in Computer Science or equivalent years of experience.
• Familiarity with DoDI 8500.01, DoDI 8510.01, and AR 25-2.
• Strong analytical and problem-solving skills.
• Excellent communication and coordination skills.
• Experience with Army enterprise monitoring tools and practices.
• Knowledge of security regulations and best industry practices.
• Ability to work effectively in a team environment and collaborate with various stakeholders.
• Experience with incident response activities.
• Understanding of Continuity of Operations Plans and Communication Plans.

Certifications:

CISSP or equivalent Cybersecurity Certification

All hiring and promotion decisions at Empower AI are based on merit to bring the best talent available to contribute to our firm’s overall success. It is the policy of Empower AI not to discriminate against any applicant for employment, or employee because of age, color, sex, disability, national origin, race, religion, or veteran status. Empower AI is a VEVRAA Federal Contractor.